Resolved! ISE DACL bi-directional setting
I have a DACL being applied allowing 445 access to an internal resource. Is there a way to allow the internal resource reverse access so it can access the restricted device on 445 as well?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hi,We are getting "parsing vsa:not a cisco vendor id:311 – radius" error logs from Nexus. What is the impact of this log?
Resolved! Read Only Web Access to ISE Nodes
Hi All,How can we create a Read Only account for web access of Cisco ISE nodes ? I created a new username with 'user' role but not able to login into admin web page.Thanks & Regards,Mujeeb
Resolved! Work Centers - Identities- Endpoints
Hi, one question in ISE please once device MAC address for endpoint is learned by ISE and place Work Centers - Identities- Endpoints , it will stay there permanent or it will be purge out lets say if endpoint not detected on the network for particula...
Hi!We are using ISE to authenticate computers connecting to our LAN using EAP-TLS and share those authenticated identities over PxGrid with 3rd party products.The problem we are hitting is PxGrid shares those identities as user identities and not as ...
Resolved! Intune MDM Attributes missing
Hi,we are currently facing the following issue running a Cisco ISE 3.2 Patch 2:We have 2 MDM Integrations, Intune and JAMF set up - both working with APIv3 and successful connection tests, querying multiple MDMs is enabled in General MDM settings.We ...
Resolved! ISE profiling rule certainty factor
Hi,Running ISE 2.7 with patch 6 (don't ask, we'll be upgrading in the next 12 months) and struggling to understand an issue with profiling rules and certainty factors.I have created a profiling policy that has a MCF of 500. My policy is made up of f...
Hi;Consider the following scenario:ISE 3.2 Patch 4Cisco vWLC 8.10.190.0Windows 10 with Google Chrome 119A user reports their device as 'Stolen' in the 'My Device Portal' and then connects the same device to the network. Based on the following authori...
Hi All, I am using Cisco ISE and configure switch for Authentication . I tried to connect test connevtivity but it got failed. Switch configuration is mentioned mmentioned , please guide me. Secondly I am using Cisco 3560 with /c3560-ipservicesk9-m...
Hi all;Consider a scenario where I want to profile an unknown device with MAC Address parameter of the endpoint. In this regard, we have two options, as show below:As my testing experience, if I choose OUI, I must provide the exact name (not somethin...
Hello,Wondering if anyone has tried to authenticate users with certificates & then also send back a URL redirect as part of the authorization profile? My goal is to provide different levels of access to users based on the ISE policy matched. I can al...
Hello, I have an ISE deployment consisting of 2 nodes. However, for the policy set I need to know which ISE processed the request. If I look in the Radius log, there is a Policy Server item and then the host name of the ISE. How can I check in my Aut...
Resolved! ise 2.3 unable to register ise node
Hi, when i tried to register ise standalone to primary ise node i'm getting following error, i have exchanged default self signed certificate on both the ise nodes. can some one help me to solve this error please. error: Unable to authenticat...
Resolved! Cisco ISE Posture for VPN users
We have Cisco ISE 2.7 patch 9 and FPR-2130 installed with ASA version 9.16(3).We have many remote users connecting on a VPN to access the intranet.We are already using ISE posturing for LAN and WiFi users using AnyConnect Secure Mobility Client and n...
I am require to fetch "Other Attributes" from endpoint database which does not seem to have in swagger API mentioned AFAIK. API is only returning fields on customAttributes./api/v1/endpoint/{id} Is there any filter I am missing ? Tried "additionalDat...
