Hi, We have configured posturing in our Cisco ISE 3.1 patch 6. The AnyConnect version for ISE Posturing is 4.10, and the Compliance module is 4.3.35. The authentication profiles are as follows: Auth Profile Compliant: This profile is assigned to VLA...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi Team,I'm posting in this forum, since I see the relevant discussion is running. Need support on finding the API[ansible]a. Trying to find the API for enabling PSN work centers -> Overview -> Deployment -> Device Administration Deployment=> Activat...
Hi all,We have Cisco ISE 2.7 patch 9 with anyconnect 4.10.x and compliance module 4.3.x.x.We have one requirement to check the DLP-Forcepoint version check on all the endpoints as a posture condition.Currently, we are checking agent presence via regi...
I think there is something wrong iin the module "cisco.ise.network_device_group" in cisco.ise 2.6.2 collection for ansible.If I use a task, with collection version 2.5.16 it works as aspected, but with 2.6.2 it does not work.With cisco.ise collection...
Resolved! Ise Deployment Question
HiIf i Generate a new self signed Cert on the primary node and use for multi use one being Admin would the application restart affect the secondary node? or would this carry on serving Clients as normal.?? Thanks
Resolved! ISE active session
Hi Dears, is there away to find out how to recalculate ise active session in 2.7 version , we have license for 2000 base sessions and ise shown is shown it is consuming more than 2000 sessions , we are sure that it is not consumming more than 1500...
Resolved! 11213 No response received from Network Access Device after sending a Dynamic Authorization request
Hi there, I see this error a lot in my ISE dashboard11213 No response received from Network Access Device after sending a Dynamic Authorization requestAt the same time I see the Posture Status as "Compliant"What could be causing this? Have anyone enc...
Hello,we've a ISE Cluster v 3.2p4 and want to import many MAC-Adresses in a Endpoint Group.If I import in "RegisteredDevices", it works, but if I want to import in a self created Group, e.g "ACME-ASSETS", it fails.Message:So, do you know if I can onl...
a. Integrate the Vault with ISE for AD password fetching and integration - Looking for APIb. Trying to find the API for enabling PSN work centers -> Overview -> Deployment -> Device Administration Deployment=> Activate ISE Nodes for Device Administra...
Can you confirm is this still the same or we have API to enable the Network default device - which can be enable and set password for TACACS.Note: Pls share if any API available for the same.W.r.t Reference of ticket - https://community.cisco.com/t5/...
Resolved! MFA for Cisco switches and routers
Hello,We currently use ISE 2.2 and the radius protocol to SSH into our network gear. We now have a requirement to make that access multi-factor authentication. We are also standing up an azure multi-factor authentication server for Cisco anyconnect...
Resolved! DACL for Printers
Hi Experts,Currently, we've an Authorization profile configured for the printers (canon) with the DACL being used is 'permit ip any any'. Now, client would like to restrict just to the basic services as given below:-permit udp any eq bootpc any eq bo...
Anyone knows the steps to reimage an ISE VM node. Current disk size is not enough and we would like to increase VM disk size, but Cisco doc says ISE node reimage is required for new VM size to be reflected.Current is primary node. There are two ISE n...
Resolved! Renewing Trustsec PAC on ISE
Anyone know how to renew an expired trustsec PAC on ISE? I'm asking this because we can't SSH into our switches any more. W keep getting "expired PAC" when trying to log in. When we check ISE, we see that the PAC expired for quite a while ago. Check ...
Resolved! Update default network device via API?
Is it possible to update the default network device via API in Cisco ISE?
