Hi;Consider the following scenario:ISE 3.2 Patch 4Cisco vWLC 8.10.190.0Windows 10 with Google Chrome 119A user reports their device as 'Stolen' in the 'My Device Portal' and then connects the same device to the network. Based on the following authori...
Hi All, I am using Cisco ISE and configure switch for Authentication . I tried to connect test connevtivity but it got failed. Switch configuration is mentioned mmentioned , please guide me. Secondly I am using Cisco 3560 with /c3560-ipservicesk9-m...
Hi all;Consider a scenario where I want to profile an unknown device with MAC Address parameter of the endpoint. In this regard, we have two options, as show below:As my testing experience, if I choose OUI, I must provide the exact name (not somethin...
Hello,Wondering if anyone has tried to authenticate users with certificates & then also send back a URL redirect as part of the authorization profile? My goal is to provide different levels of access to users based on the ISE policy matched. I can al...
Hello, I have an ISE deployment consisting of 2 nodes. However, for the policy set I need to know which ISE processed the request. If I look in the Radius log, there is a Policy Server item and then the host name of the ISE. How can I check in my Aut...
Hi, when i tried to register ise standalone to primary ise node i'm getting following error, i have exchanged default self signed certificate on both the ise nodes. can some one help me to solve this error please. error: Unable to authenticat...
We have Cisco ISE 2.7 patch 9 and FPR-2130 installed with ASA version 9.16(3).We have many remote users connecting on a VPN to access the intranet.We are already using ISE posturing for LAN and WiFi users using AnyConnect Secure Mobility Client and n...
I am require to fetch "Other Attributes" from endpoint database which does not seem to have in swagger API mentioned AFAIK. API is only returning fields on customAttributes./api/v1/endpoint/{id} Is there any filter I am missing ? Tried "additionalDat...
Hi,the closest answers to my question would be thesehttps://community.cisco.com/t5/network-access-control/ise-split-deployment-question/m-p/4560826though in my case i have two 3615. After having read it, I haven't understood how I can split them.What...
Hi, we have ISE 3.2 with two PSN and we want to have guest redundancy. we created auth policy and auth profile for 1st PSN and guest portal working perfectly, now in case PSN 1 is down we want PSN2 to handle the traffic, searching old post here for ...
Hi all;One of the options for configuring the Certificate Provisioning Portal is to specify who can access it. Look at the following figure:As you can see above, it mentions that "User account with Super Admin privilege or ERS Admin privilege will ha...
Good morning everyone. Has anyone seen this or know how to fix it? I'm running 2.3 and plan to upgrade to 2.6 in early January but these emails have to be wrong since we have over 100 NADs in the environment now running ISE. Alarm Name : ISE Authen...
Here is my nightmare of refreshing my ISE environment from ISE 3.0 patch-3 to ISE 3.2 patch-4. It took over 24 hoursto complete everything on a four nodes cluster. Here is what it took to finish the job with ZERO downtime:Appliances are SNS-3655nodeA...
Hi, I no longer want to evaluate licenses any more, and I want to just use the Base license for ISE, how do I go back to just using the Base license?
I'm looking for a way to renew the "Certificate Services Node CA" certificate that was signed by the internal Root CA. The Node CA is expired but was not renewed by ise. I'm able to create a csr but can't find a way to sign it, except exporting and s...
