Network Access Control

Hello All,We've recently just moved to Windows NPS (*from ISE... sad face...) and I'm trying to include a Vendor Specific Attribute to push an ACL name using "Cisco-AV-Pair" attribute.I was able to successfully push "Cisco-AV-Pair" to desk phone clie...

Hi,We are experiencing an authorization issue when entering a certain command in our global config on to fresh switches via the console cable.Switch Model = 9300Switch Ver = 17.9.4aAlthough this seems to be happening on other switches and versions as...

I have a customer who has laptops with a VPN client and a certificate issued via SCEPMAN. The VPN client connects to Netmotion which in turn sends a radius request to the ISE for the client certificate to be checked against SCEPMAN and the result pas...

What is the difference between L-ISE-TACACS= and L-ISE-TACACS-ND= part numbers?  The price difference is $4K list vs $6K list respectively.  Also the latest ordering guide references.  L-ISE-TACACS= as a legacy part #?  No results via Google, no EOS,...

Dear Community,We use cisco switch model c9200l and on boarding in ISE dashboard.We also config IP ISE server on switch level.Could you provide the good practice how to check connectivity with below info.- From switch to endpoints ( PCs) ( MAB profil...

If same set of devices are referenced in a posture policy set and normal wired/wireless   policy sets with different authorization profiles ,to which policy set does it match?

Hi,I read few discussions on manipulating the routing table of ISE, especially when some servers, like RADIUS, are reachable out of a different interface. For such cases, somebody suggested to use static routes and even a second default gateway.As ar...

Hi all;What really the following option does:Thanks

Hi, I'm new to ISE world and I actually started few days ago watching the webinar on cisco learning network. Not sure If I'm getting this right. Last section i saw was discussing about RTC and TC-NAC. From what I understood in RTC ISE is doing remedi...

Hi,I'm new to Cisco ISE and I'm trying to get my head around how it all works.Can I ask, how do you know which certificate in ISE a computer will authenticate against?I'm setting up ISE to use EAP-TLS using a trusted root certificate and I have the c...

Hi team,In our device compatibility docs of ISE, I see some confusions:For ISE 1.2, we mentioned that 2960 LAN Lite is supported but not recommended with ISE 1.2 due to limited feature support. LAN Lite supports only 802.1X and VLAN assignmentsFor IS...

Hi all;If ISE is implemented in air-gapped scenarios (where ISE cannot connect to the internet), how can I download the latest version of  Network Setup Assistant for Windows from Cisco's web site?Thanks

Hello We have an old ise 2.7 deployment with 2 notes. The PPAN is fine but the Secondary is out of sync since along time.... (several months) Looks they can not communicate anymore. We need of course to check dns, ntp , certs and network connectivity...