I did not join my Cisco ISE in the Active Directory DNS zone, but the Cisco ISE still could resolve the domain name of the server which is SRV.local and could ping test.SRV.local, shall i still need to put it in the DNS zone and in the Reversed DNS Z...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Context: I am currently testing a BYOD setup involving dual SSIDs using Cisco ISE 3.3 for mobile devices. The configuration process begins with an open SSID, followed by a secure SSID connection via TLS once the profile and certificate are retrieved ...
C1000-24P-4G-L (15.2.7E10)Like the title suggests this is what I want the switch to do:Depending on what device I connect I want it to either do thenormal 802.1x authentication (workstation / VLAN 10) by the radius server.but if it is a device with a...
Hello,In the AnyConnect client under the "Scan Summary" tab, it shows the names of the posture checks as they are defined in ISE. Is there a log on the workstation that will actually show WHAT those items in the Scan Summary are actually looking at?
Hi, Requirement is to enable dot1x wired authentication/authorization for Intune registered devices. There is only Azure AD and Intune. There is NO On premise component (no on premise/traditional AD, or ADCS) According to the following link, we need ...
Does anyone had experience of Microsoft Local Administrator Password Solution (LAPS) with Cisco ISE. One of my banking customer is managing user local admin account using Laps for the helpdesk operation. Customer system team are using local admin acc...
Hello All, Cisco ISE: v2.0.0.306Switch: 3560 IP Phone: 7941G I have had many other 7941G IP Phones connected to this switch, which have all profiled/authenticated correctly. The only difference between those phones and this one, is that this phone ha...
Hi all,I have a four new standalone nodes which will be going into a cluster, I am seeing two nodes have a DNS warning. All nodes are located in the same caI can ping both DNS servers .21 and .22 and nslookup up works to resolve its own IPWhy are two...
Hi all,I have deployed 4 ISE nodesAll are reachable by SSH and ping. But one of them is stating refused to connect when going to the GUI via https...Why are three responding differently?
Cisco WLC 9800 is configured to broadcast a SSID alias as "Original_SSID", the WLC is configured with a ISE controller IP, but in the client computer we see the available SSID alias as "Other_SSID".We do not access to the ISE configuration, can the I...
Hello, We have observed both on HP and Dell laptops and workstations that if they are using Intel I219-LM NIC they intermittently do not respond to EAP Identity-Request. We have excluded and have confirmed with Cisco and Microsoft TAC any other poten...
Hi, i have few admins users who do authenticate with tacacs on Cisco ISE. i want to monitor all the commands they issued on devices and which devices they access for audit purposes. i can able to get the reports from cisco switches for which users a...
So I'd like to use ISE to authenticate then authorise a device based on an external CA presented during 802.1x. I'd also like ISE to use an OCSP check for the validity of this cert.What are the steps to get this to work? Do i need to import the root ...
I have just started using Secure Client Posture on my windows workstations. All but 2 work fine. The two are using the IP of the ISE instead of the FQDN. All systems have the same ISEPostureCFG.xml files on them. If I disable the network connectio...
