Dear All, We are using ISE version 3.1. Users are accessing the internal network via wireless connectivity on WLC 9800-L version 17.9.4. We have configured a posture lease (1 day), enabled LSD, and no PRA. Here's the issue: Users are randomly trans...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
I configured posture policy which use (windows 10(all)) as operating system criteria. and all posture conditions using windows 10 also. but windows 11 PCs still be scanned for posture. Note : posture requirements still in audit state. Can someone exp...
Resolved! ISE Patch Question
I have a 4 node deployment - I plan on patching the via CLI and start with the PAN first - PSN Second and the Sec PAN third, but when the below question is presented do I need to say no in order to continue patching the remaining nodes individually?...
Post 3.4, patch 4, Replication stop between PAN and PSNs, error, Jediss replication failed, CLI access issue-error failed to connect to the server. throwing an error in the debug log : Error, Failed to connect to server, could not connect to test-ise...
ISE Upgrade Incident SummaryOverview: ISE 1 and ISE 2 were upgraded from version 3.3 to 3.4. The upgrade did not go smoothly because the upgrade on ISE 2 failed partway through.Timeline and ObservationsPre-upgrade: The bonded interface for Gi0 was do...
Hello!We tried to upgrade our ISE 3.2 on VMWare (patch 3,4 and 7) to 3.3 using the upgrade bundle, but got the same result:the appliance becomes a brick after reboot, which is included in upgrade process. No logs are available after that reboot, and ...
We are trying to make auth work in Grafana via Cisco ISE and RADIUS protocol through OAuth, and we have managed to get this working by using Cisco AV-Pair dictionary attributes. In order to granularly authorize access to differnt dashboards, I need o...
Resolved! Cisco ISE
Hello,I need to renew a certificate that is expiring soon, which is used for Admin access, EAP authentication, and RADIUS DTLS.This certificate is signed by our internal certification authority.I generate a CSR and sign it with our certification auth...
Resolved! Query on Cisco ISE 3.2 patch 9
It looks like Cisco took quite long time to release patch 8 for ISE 3.2, it was release at end of November 2025.Now they release patch 9 on Dec 2025. Was there issue with Patch 8. If current system is on patch 7 can we install patch 9 directly ?
Resolved! New ISE node not showing any TACACS logs
I had two ISE VM nodes running on 2.4 ( no patch) with in sufficient resources. I was getting multiple alarms.I made one node primary for both Admin and MnT personas and de-registered the second node. Then I registered a newly created VM node with su...
Morning Cisco Forums,I'm looking for some guidance on the process of replacing ISE administration nodes, in a 4 node cluster. In our current environment, we're running ISE version 3.4p4, and have a primary/secondary administration node, and 2 policy...
We have a global deployment of multiples PSNs ( 2 US-WEST, 2 US-EAST, 2 EU and 2 APAC). Currently we have a single guest hotspot portal with a single URL (guest.portal.XXXXX.com). Each site has a local FortiGate which acts as the DHCP server and a lo...
Hello, i have configured a Sftp server as repository but i'm unable to add the Crypto host_key add host <server ip/fqdn> on the secondary PAN and MON and PSN.The cluster is made of Primary PAN Secondary PAN Primary MON Secondary MON Psn1 Psn2 on the ...
Hi Also upgraded to latest ISE 3.5.0 patch 1. Switchports started failing with Could not parse the cts-pac-opaque attribute also cts data empty show cts environment-dataCTS Environment Data====================Current state = STARTLast status = Failed...
Hi,We have a strange issue where devices that are in an identity group on ISE which in turn get authorised and download a DACL are falling off the network at seemingly random times.Example Switchport:interface GigabitEthernet2/0/23description "Exampl...
