Team,I encountered a issue where couple of user authentication passed but machine auth is failed.We are using Eap-fast authentication for User and machine (mschapv2), i checked the registry value LsaAllowReturningUnencryptedSecrets is set a 1 which y...
Hello,I've upgraded our Test ISE VM from 3.4 Patch 6 to 3.5 Patch 3 and now I've no more CLI access.same User on GUI is working, TACACS, Radius is working but no CLI Access, not with ssh, not with VM Remote ConsoleAdmin Access on GUI is working with ...
Hi,I am encountering a similar issues as the Radius Shared Secret Bug:CSCwn09816 - RADIUS Shared Secret Masking and CSCwp06928.I am running Version 3.4 Patch 7 on my deployments.Condition:When duplicating Network Devices the shared secret always chan...
Can anyone share ways to expand beyond the limitation of 700-800 authorization policies in ISE? I have a customer (new network design) with 400+ sites and 2+ authorization rules per site. Their desire goes well beyond what the ISE documentation say...
Hi Experts,Currently all our phones in the estate using default vlan and getting and IP to connect to the network.Phones are coming to its end of support hence new phones being asked to assigned to a dedicated vlan.I am thinking of using dynamic vlan...
Hi, In ISE deployment, we have a posture condition for patch management, (up to date, check for missing critical patches).The windows update agent version is 1510.xThis is not available on the ISE 3.3.I would like to also confirm if we need to integr...
We're running Cisco ISE version 3.3, patch 5,and we've joined it to our Active Directory domain controller.We ran into an issue where if a user's password expires,they can't change it while connected via 802.1X."Enable Password Change". is already en...
Are there any downsides for enabling TLS 1.3 on Cisco ISE 3.3 patch-12? This is already enabled in Cisco ISE 3.5 patch-4. In other words, is it going to "break" anything in my environment? TIA. Spoiler (Highlight to read)
I need help from someone who has done this before with actual experience, and not sending me links to look at. I am running Windows-11 version 23H2 in my environment (soon to be 25H2), and we use 802.1x for wired (Ethernet) authentication in the envi...
We have a Cisco ISE deployment using both Machine Authentication and User Authentication.The current behavior is as follows:During Machine Authentication, the endpoint is assigned to a specific VLAN.After the user logs in and User Authentication is c...
Wondering if anyone has experiences this recently. We have a Cisco ISE 3.3 patch-12 environment and Microsoft Windows-11 23H2 using 802.1x wired via EAP-TLS with certificate. Everything was working without any issues. Yesterday, we upgraded a few la...
We're running Cisco ISE version 3.5, patch 3,and we've joined it to our Active Directory domain controller.We ran into an issue where if a user's password expires,they can't change it while connected via 802.1X.Has anyone dealt with this? How can we ...
Hi All,I am preparing for ISE upgrade from current version 3.3 patch 8 to patch 12 .Prior to upgrading, I did the system and operational backups and also exported and saved the system certs.1. Do I need to export all trusted certs as well and save th...
Hello TeamI need some suggestion from expert in Cisco ISE community.we are using eap-fast with machine and user mschapv2 authentication, and i am having a requirement is1. To migration user to eap-fast using machine (cert auth) and User mschapv2 or2....
Hello, i get the message when i try to test the connectivite between my switch and ise:Attempting authentication test to server-group ISE using radiusNo authoritative response from any server.I assum that the cnfig in switch is correct and i can reac...
