Network Access Control

HelloI have encountered an issue what i believe could be a Switch (2960x) or Cisco ISE problem/bug regarding radius authentication with mac-addresses. We have not put ISE into production for this particular purpose yet so it's still in the lab.We use...

Existing deployment was FMCv version 6.6.0 and ISE-PIC 2.6.0.156, Patches 2,3 & 10.This was communicating fine passing through the discovered identities to FMCv.I have just completed a upgrade to FMCv to version 7.0.5. This communication link through...

Hi,I am trying deploy ise posture testing without Client Provisioning Portal. What I already have done is On test pc(windows7):1. install anyconnect ise posture module by msi installer2. install anyconnect compliance module by msi installer3. use pro...

I am attempting an in-place upgrade of ISE 2.3 to version 2.7 on a virtual instance. The upgrade itself seems to have completed without issue. But the post-upgrade process is not cooperating. Specifically fixing the domain join to Active Directory.In...

Hi, Our customer has ISE Posturing for their laptops when they are on the VPN and also when they are on the Wired Network. For this, they use AnyConnect 4.8.  When they are on the VPN, they connect successfully. The System Scan run successfully and t...

I want to disabled SHA1 Ciphers on ISE, but I have configured SNMP for multiple switches for SNMP CoA, the SNMP authentication protocol is set to SHA, will SNMP CoA fail then? I am worried about the impact for this, I am not sure if SHA1 will be used...

Hello, We have a bare metal ISE Server on premises. We have migrated many of our services over Azure cloud and since there is only one ISE node, we want to have a cluster with a node in the cloud. Is it possible and what are the limitations for this ...

Hi community, I'm using Catalyst switches and want to perform open mode (NAC monitor) mode using IBNS 2.0 configuration.The RADIUS server is a Cisco ISE. Switch ports: The ports are configured in open mode in the host-mode multi-auth.ISE: The default...

Trying to figure out what fields are available as filters in an ISE endpoint API query.  I am not seeing anything in any documentation.I can find an endpoint by MAC with this query: https://ise:9060/ers/config/endpoint?filter=mac.EQ.00:11:22:33:44:55...

Team, we see issues with 802.1x authentication after Windows 11 upgrades.Few complaints coming in are when the machine is idle for some time the 802.1x authentication breaks and the end users  computer goes in the default Internet only access VLAN. T...

Hello guys,I have been using ISE radius policy to assign the Security Group and it was working fine. Now, I'm using a third part tool to assign the SGT on the cisco switch interface (access port) using the SSH connection and keep the TrustSec policy ...