Welcome to the Cisco Community Ask Me Anything EventWe invite you to participate in our upcoming Ask Me Anything (AMA) conversation. Please submit your questions from Thursday, April 23, 2026, through Thursday, May 7, 2026. Our experts Miguel Martine...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! CPL Template MAB/Dot1x Simultaneously
One of the advantages of using the CPL (IBNS 2.0) style template is you have the option to run MAB and Dot1x simultaneously. This means closed mode is not as detrimental to MAB devices or you can do VLAN moves in open mode without the worry of devic...
Resolved! Wired 802.1x Supplicant log out
Hello All, I have an issue after deploying wired 802.1x. The cisco ISE is integrated with windows AD, and the switch integrated with ISE as a radius server. The endpoint users logs in to their windows PC using their domain account and they successful...
Resolved! Cisco ISE - profiling licensing
Hi all, I'm having some trouble understanding when advantage license is actually consumed in Cisco ISE. I read at the official guide that "basic profiling" is included in Essentials, and more "advanced profiling" is included in Advantage. When testin...
Resolved! ESXi requirement to run ISE version 3.2?
According to Cisco documentation, in order to run ISE version 3.2: https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/install_guide/b_ise_installationGuide32/b_ise_InstallationGuide32_chapter_2.html. It stated: VMware Virtual Hardware Version/...
Resolved! Cisco ISE and Active directory
Hello,I would like to clarify a quick doubt regarding the integration between Cisco ISE and Active Directory.What privileges do the AD user that we use to integrate Cisco ISE with the active directory need to have?Should it have admin privileges or i...
Resolved! Upload costumized captive portal on ISE
GreetingsWe are working for guest SSID integrated with ISE and we would like to create a captive portal, ia there any option to upload external costumized captive portal
Windows device frequently disconnect from wifi with event id 12013.Connecting to network after connecting the machine with hotspot and then swapping to device-wifi network(office_wifi).Device-wifi certificate available in desktop as per log but Cisco...
Resolved! Cisco ISE SNS-3755-K9
I have a client who purchased two SNS-3755-K9's. Does ISE come preinstalled?
Resolved! ISE Posture on mobile
Greetings I would like to know if we can implement posture on android and ios phone or just only on windows
Resolved! ISE 3.2 install on VmWare using ova file
We are currently at ISE v2.4 and want to get to v3.2 with the least amount of downtime, so we decided to spin-up a new ISE Vm using ova files. Based on the install guidelines we have decided on (2) Medium-Large boxes. There are 2 different files in ...
When "Verify the server's identity by validating the certificate" is enabled, what exactly is the supplicant doing? I can see issues with the supplicant trying to reach out to the CRL to validate the cert is valid so i assume the client isn't doing ...
The closest thread to my question would behttps://community.cisco.com/t5/network-access-control/how-to-export-certificates-from-ise-using-cli/td-p/3399097Unfortunately, it refers to 1.4, we have 2.7, and (hence?) what's written there doesn't work.I'm...
Resolved! Ansible API for Interface configuration
Hi Team, Looking for Ansible API for configuring below interface config, which has been done manually via cli mode.Configuration: config terminalinterface GigabitEthernet 1ip address <ipv4> <netmask>no shutdownipv6 enableipv6 address autoconfig!
Hi, I would like to know where AnyConnect ISE Posture Module look for certificate when is communicating with ISE PSN(Policy Server). ISE Certificate it's signed by Corporate Root CA. Should I need to import Corporate Root Certificate on Personal or ...
Using ISE, we want to set up TACACS not only for CISCO equipment but also for third-party equipment. I'm trying to create a TACACS profileI understand that each vendor has an attribute value to set up TACACS on the ISE. If I put various attribute val...
