Hello experts ! We use Cisco ISE for guest provisioning and our customer reported interesting issue. For a specific Guest account type, we have set the account "Maximum account duration" to 30 days, counted "From first login", however when sponsor ge...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hi Experts,Planning to perform a backup and restore upgrade from version 2.2 to 2.7. Before I could start performing this action, wanted to understand what does the configuration backup capture.What are the other backups that I would be needed to cap...
Hello,is it possible to authenticate users of the ERS API against an external identity source like LDAP?The API works well with a local admin account put in the admin group "ERS Admin".If I create another admin group mapped to an external role config...
Dear Community!I have a problem configuring 802.1x on cisco C9200L device. IP phone AASTRA 4422 is assigned the Guest VLAN IP but not the Voice VLAN IP as expected. Can you help me fix this error? Thank you !My configure as below :interface GigabitEt...
Resolved! Cisco ISE - Deployment question
Hello,I have a small question about the deployment of Cisco ISE.Actually we are running a cluster of 2 members, each hosting PAN-MnT-PSN.We want to extend the ISE functions to our "industrial network" separated by a DMZ.To limit the trafic between th...
Hi all, We are moving from AD to Intune and Azure AD. I can create the External MDM (Intune) server and its working fine. However, I want to create a new policy set for devices which migrated to Intune. Therefore I created a new SSID. But how can I a...
Hello, Frequently few users are facing issue in accessing the shared drive even being complaint and correct policy applied with permit all. Anyconnect software in user PC also shows complaint. Solution: when user repair the network (initiate re-authe...
I have ISE 3.1 I have anyconnect posture agent which is changing the IP of wireless adapter after successful posture scan (compliant) Pc becomes compliant and IP is changed from quarantine to a new IP address by DHCP. I want to know how the wireless...
Hello, The Cisco scaling numbers for maximum concurrent sessions for a Dedicated PSN in a fully distributed deployment is 10,000 for Small VM (32 GB RAM, 16 vCPU). But the same RAM/CPU in AWS (c5.4xlarge) apparently support 40,000 concurrent sessions...
We are seeing an issue with laptops and docking stations. They start both connections and it causes ISE to fail authentication/posture. Has anyone found a way to have a laptop with both wired and wireless default to a preferred connection? ...
Hi all,We have ISE integrated to all our NEs with only device administration(TACACS+) and VM license purchased. We wish to integrate ISE with DUO for MFA for internal users. Is it possible to integrate ISE with Duo without any tier license since DUO ...
Hi team,I would like to ask if anyone here has experienced disabling the auto-update of AnyConnect on Cisco ISE.The idea here is that I would want my clients - some of them run the 4.9 and some to run 4.10 parallelly. I would be really appreciated it...
Hello,We have run into an issue with Radius Authentication with one set of Cisco ASA Firewalls.The issues is as follows:Initially, the radius preshared key was not configured for our primary radius server. This was noticed and corrected immediately. ...
Resolved! ISE 3.2 on Azure marketplace
Hello,is there an ETA for the ISE 3.2 app on Azure marketplace?Many thanks,Marco
Hi, ISE is returning "24206 User disabled" for guest accounts. The guest location is set to my timezone and the accounts duration is set for "From first login". I can see the correct location on the account details and there are no time restrictions...
