Hi,We want to allow some ReadOnly users to do show running command with nexus switch but not allow them to still make any change configuration. It seems RO users can put some commands but they can't put show run command yet. Following snapshots are o...
Hi,We want to allow some ReadOnly users to do show running command across network device but not allow them to still make any change configuration. It seems RO users can put some commands but they can't put show run command yet. Following snapshots a...
Hello, I've recently created "MAB Client Installation" authorization policy on Cisco ISE. It has three conditions all of which have to be met in order for the policy to match.- Network Access: Netwrok Device Name equals xxxxxxx- Normalised Radius·Rad...
2 ISE deployments with different System certificates.The original deployment was built with System certificate using RootCA Sha1 this has been in place all the way to 2.7.Now the new 3.2 deployment system certificate as a new root and intermediate ce...
Hi Team,What is the best way to allow access to O365 via FTD? Can i use the applications such as office 365 and allow ANY ports will allow access to Office 365 apps? Is it any Security risk? Or any other best way other than this?Regards,Sanjay S
Hello All,I currently have a Cisco ISE 2.7.0.356 VM running on a Red Hat Enterprise Linux 7 (64-bit).Would you happen to know the best way to find out the End Of Support date for the VM?Since its a file would it be wise to create a Cisco TAC ticket t...
Hi, i bought a gx50 firewall meraki go plus and when i started working i noticed that it automaticly block sites i need to use for work. They are totally healthy sites. I tried to google but i cant find anywhere how i can add a site to the firewall t...
Hi colleagues, Im trying to find the best way to make an upgrade of my UCS C-220 CIMC (that host an ISE Server). I found two possible ways to make this upgrade: Option 1: Upgrade from .ISO image (currently recommended Fw version) Option 2: Upgra...
Hi all;I have two ISE 3.1 (for HA) with Patch 5 in my production network. Several days ago, I decided to update ISE to Patch 6. So, uploaded the patch file onto the primary ISE internal storage and then through the CLI, updated it successfully. But, ...
~ $ sudo nmap --script ssl-enum-ciphers -p 443 dlsisep001.humana.comStarting Nmap 6.40 ( http://nmap.org ) at 2023-09-08 08:13 EDTNmap scan report for dlsisep001.humana.com (8.8.8.8)Host is up (0.00061s latency).PORT STATE SERVICE443/tcp open https| ...
I am running ISE 3.1, and trying to enable failed authentication protection to prevent Active Directory user accounts from being locked by failed PEAP authentication attempts to WiFi (while I'd love to disable PEAP authentication completely, for vari...
ISE Teams,Having trouble verifying if a single ISE instance can support multiple separate RSA SecureID instances simultaneously. Can someone please confirm or deny this capability?Much Appreciated
Hi all;As you know, Super MnT is a term that was first introduced in ISE 2.4. Does this term still applicable with ISE 3.X?Thanks
How do I filter ISE alarms to NOT include this type of alarm? I still want to see when config changes, just not configuration added by internal-feed-user for OUI. I see the filter in the alarm settings but not sure what to put in the filter.Alarm Nam...
Dears; I need your feedback, if i can integrate Cisco ISE version 3.2 with Google Directory Services as i can't found any resources related to this topic
