I am attempting to automate the imaging process in an environment by utilizing ISE profiling.I have the following pieces working as expected:Using the DHCP probe with the dhcp-class-identifier STARTSWITH PXEClient:Arch:. The endpoint MACs move to a ...
Hi everyone,Recently, I have made couple of changes to the customer's system certificates, NowI’m starting to face an issue with the Sponsor/Guest portal redirection in Cisco ISE and would appreciate your input.Observed Behavior:When accessing the po...
We can’t get users connected to Extreme APs to work as guests. The captive portal and RADIUS are hosted on a Cisco ISE.When they connect, the portal (Hotspot, no authentication) appears and lets them in, but they can’t access the internet. Everything...
Hello! I've been having some login issues when logging into the ISE GUI. After logging in, I get the message: "Oops. Something went wrongInvalid request.Request not processed - Bad input.Please notify your administrator. If you are the administrator ...
I am repeatedly seeing High Latency for RADIUS Access-Request and Queried PIP for Entra ID for dot1x with Entra ID.Is there a clue you can share. ISE version is 3.5 P3. You see below latency value is very high. For MAB auth I do not see this much hig...
Good evening,I have several clients at remote locations that initiate a new authentication every 30–45 seconds after a successful authentication.Could this be due to latency?The TotalAuthLatency is ~500–550 and the ClientLatency is ~400–500.Sometimes...
Hi all; Based on my traffic capture you can see below, my ISE 3.5 Patch 2 box wants to negotiate SMB version 2 and my AD DC accepts it and starts with SMBv2 version, although based on Cisco docs, ISE now supports SMB version 3. Any ideas? Thanks
while create CSR, replacing an existing certificate on ISE
Hi there,Im having som trouble setting up PassiveID in a new ISE install.ise version 3.4 patch 4I have 3 nodes, all of them have passiveid enabled, and i can see the service running in cli with 'sh app stat ise'in the ise passiveid-agent.log i see th...
In newer version of ISE, i cant find an option or section where i can configure device portal tags. We are using 3.3 version patch 9
Hi FolksFirst post here.My customer has an ISE2.7 installation, being replaced shortly. There are all sorts of issues with it - including the inability to backup the operational database due to some stored procedure errors. As part of the migration t...
I have a problem with my self registered guest portal, where the sms is not sent when geusts register.When i click the "Send test message" under the portal page customization it works as it should, but its not working in the actual guest flow.I can s...
Hi all,all our corporate laptops authenticates in corporate networks performing 802.1X EAP-TLS, via a user Certificate and all is working fine, we are running ISE 3.2 Patch 7.The Matching CAP profile is using "Subject - Commmon Name" for identity che...
Hi, I would like to know if it is possible to disable the "manage accounts" option for specific sponsor groups on the sponsor page. This feature would be very useful for better account management.
I am seeing constantly High Response Time in the live log for 802.1x with TEAP while User and Device Lookup happening through Microsoft Graph API.Has any of you faced this issue and share if any suggestions. ISE version is 3.5 patch 3
