Network Access Control

HiIf i Generate a new self signed Cert on the primary node and use for multi use one being Admin would the application restart affect the secondary node? or would this carry on serving Clients as normal.?? Thanks

Hi Dears, is there away to find out how to recalculate ise active session in 2.7 version  , we have license for 2000  base sessions  and ise shown is shown it is consuming more than 2000 sessions , we are sure that it is not consumming more than 1500...

Hi there, I see this error a lot in my ISE dashboard11213 No response received from Network Access Device after sending a Dynamic Authorization requestAt the same time I see the Posture Status as "Compliant"What could be causing this? Have anyone enc...

Hello,we've a ISE Cluster v 3.2p4 and want to import many MAC-Adresses in a Endpoint Group.If I import in "RegisteredDevices", it works, but if I want to import in a self created Group, e.g "ACME-ASSETS", it fails.Message:So, do you know if I can onl...

a. Integrate the Vault with ISE for AD password fetching and integration - Looking for APIb. Trying to find the API for enabling PSN work centers -> Overview -> Deployment -> Device Administration Deployment=> Activate ISE Nodes for Device Administra...

Can you confirm is this still the same or we have API to enable the Network default device - which can be enable and set password for TACACS.Note: Pls share if any API available for the same.W.r.t Reference of ticket - https://community.cisco.com/t5/...

Hello,We currently use ISE 2.2 and the radius protocol to SSH into our network gear.  We now have a requirement to make that access multi-factor authentication.  We are also standing up an azure multi-factor authentication server for Cisco anyconnect...

Hi Experts,Currently, we've an Authorization profile configured for the printers (canon) with the DACL being used is 'permit ip any any'. Now, client would like to restrict just to the basic services as given below:-permit udp any eq bootpc any eq bo...

Anyone know how to renew an expired trustsec PAC on ISE? I'm asking this because we can't SSH into our switches any more. W keep getting "expired PAC" when trying to log in. When we check ISE, we see that the PAC expired for quite a while ago. Check ...

Is it possible to update the default network device via API in Cisco ISE?

Can ISE limit restconf commands sent to network devices?  Essentially a program was built to clear arp on ASRs and also shut/no shut specific interfaces on C9500s.  Can we limit the commands to just that via ISE?  I'm not tasked with implementing thi...

We plan to operate two nodes.I have one concern regarding design. If ISE HA is not implemented and two NODEs with PAN/MNT/PSN persona roles are operated as ACTIVE/ACTIVE as shown in the configuration diagram, will there be any problems? From a servi...

What is the correct Cisco smart licensing portal for registration, renew registration and refresh these days?  Currently I have:smartreceiver.cisco.comsoftware.cisco.comtools.cisco.comtools1.cisco.comtools2.cisco.comI need to cleanup my firewall rule...

Hi, This setup is in a k-8 school where we have numerous Content and Threat Categories blocked by network default. I want to create a Group Policy that will bypass most of the restrictions created in the default setting to allow school admin staff an...