Network Access Control

Hello !! We recently came across an error with ISE and some Android devices. The failure reason is: 12948 supplicant sent unexpected unencrypted tls handshake message instead of tls application data in peap protocol. verify that supplicant is configu...

Hi all, I saw a conversation about this from a few years ago. Can someone at Cisco please confirm if ISE supports EAP-SIM, EAP-AKA, or EPS-AKA, of if there are plans to do so.  If not, do enterprises still have to rely on CPAR, and how would that int...

Hello.Upgraded ISE patch version from 3 to 12After the upgrade, I entered the 'show version' command and it says============Show version =============Cisco Application Deployment Engine OS Release: 2.6ADE-OS Build Version: 2.6.0.900.55ADE-OS System A...

Hello community, While trying to integrate FMC with ISE-PIC we are getting the error below after i press TEST while creating identity source. Primary host: test: ISE connection. Preparing ISE Connection objects... Connecting to ISE server... Beginnin...

ISE 2.7 has patch 4,5,6. SXP stays in 'initializing' on SXP service after either patch 5 or 6 upgrade.  We have tried everything but we could not get it back 'running' stay.  'sh cts sxp conn bri' shows On on all devices.  We do use SXP maps. Does an...

Good day,     I'm trying to do a bulk modification of users data in a Cisco ISE. We're migrating from an ACS to and ISE and I've migrated all the TACACS users from one to another. All the users are disabled because of the password policies and have t...

When updating pyise-ers to ISE 3.1 compability I found a regression in ers/config/sgacl/ ERSResponseDELETE ers/config/sgacl/does_not_existResponse: { "ERSResponse": { "operation": "DELETE-delete-sgacl", "messages": [ { "type":...

Hi ,How to change   the value to 2048  in cisco ise 8444 SSL/TLS Diffie-Hellman Modulus <= 1024 Bits6514 SSL/TLS Diffie-Hellman Modulus <= 1024 Bits8444 SSL/TLS Diffie-Hellman Modulus <= 1024 Bits443 SSL/TLS Diffie-Hellman Modulus <= 1024 Bitsise ver...

                         - FYI : https://www.cisco.com/c/en/us/support/docs/field-notices/740/fn74005.html  M.

I am trying to add ISE(version 2.6) to Active Directory(WS 2019) with domain administrator credentials. The user has domain groups admin and domain user I get the response:Error Description: Join failed, reached the maximum number of failover attempt...

Hi folks,I’ve got a specific use case whereby we need to use peap-mschapv2 and add a condition where by the device has to be in a endpoint identity group by mac. For example the workflow - User connects to wireless with an ssid that is 802.1x enabled...

Hi, We have a Cisco ISE implementation with a single domain (Active Directory), we are trying to add an other domain (New Active Directory with a new Domain name separate from the old one) to our implementation, is it possible to do it, if YES how to...