Hello.We are trying to make our network fully 802.1x compliant, and one of the only subjects we need is our IoT Trunk ports.I have followed this guide to create our Flex AP trunks to work on 802.1x ports, it works flawlessly.https://www.wiresandwi.fi...
Does anyone know of a way to integrate the Cisco Software Portal sign-in with Microsoft Azure AD such that we can use our Azure AD Creds to authenicate to cisco.com?
In terms of security, what is the best way to help harden a network regarding Firewall Policies and ACLs on switches?For example, lets say I create a rule on the firewall to block 192.168.1.0/24 from talking to 192.168.2.0/24. Should I also create an...
Hello all,Not sure if this is the right forum or if I should post to the Switching forum, but I'll start here. : )We're starting to implement NAC in Monitor Mode on several of our switches, and we have a fairly mature ISE instance. We have someone el...
We are in the process of moving from ISE 2.7 to ISE 3.2 and I am having real difficulty with the new user interface, specifically when selecting authorization policy results.The ISE 2.7 UI is perfectly clear and usable but the ISE 3.2 one is extremel...
Hi, Is there a way to disable default guest and sponsor portal ? I am running nmap scan on ISE and port 8443 and 9002 corresponding to guest and sponsor portal are open. I don't have guest use case so I am looking to close them but don't see an opt...
Hello, Has anyone deployed a Guest Portal 'exposed' via the Internet to cater for SD-WAN Local Breakout Guests? A second Interface (or another) is assigned to provide the Guest Captive Web Portal. The primary interface is reserved for the Management ...
We have RHEL8 Workstations in our environment that are failing dot1x authentication using EAP-TLS. We are attempting to perform cert based dot1x authentication but getting no help from Red Hat at all. Linux machine is configured with EAP-TLS with no ...
We recently upgraded our ISE deployment from version 2.7 to 3.2 which came along with a PxGrid change from version 1.0 to 2.0.We have Axonius using PxGrid which worked when we were on ISE 2.7, but it doesn't want to work with ISE 3.2. I know PxGrid 2...
How does the guest wireless login doesn’t expire for 30 days when we use AD credentials to log in?
Our Cisco ISE environment has recently encountered issues when attempting to create configuration backups. When we try to create a backup of the configuration, we receive error messages (Backup Failed: Server=SL-PAN01; Message=ISE INDEXING ENGINE BAC...
Hi, all. We are having a little trouble using the correct operand in an authorization condition, here is what we are trying to accomplish: In our 802.1x environment, ISE is profiling all devices, including the printers. Up untill now, all printers (d...
Hi all!We're using Cisco Trustsec in our Branch Office and currently investigating an interesting issue - it looks like Radius Suppression does not work for endpoints connected to NADs onboarded for CTS.As a result we see all of the failed attempts (...
hi everyone, I successfully deployed a VMware VM running 3.2 with RHEL 8 / ESXi 7.x and was able to install with no issues patch 2 and 3 on this version. However, I cannot install patch 4 no matter what. I verified the CHECKSUM of the file downloaded...
