We are running ISE 3.1 patch 4 and rolling out wired connections with posture checking. the issue we are seeing is with computers on 24x7 , we are a manufacturing plant. With the lease setting at 24 hrs, and the the posture recheck at 12 hours,...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hi,Could someone please help me on this error? why I am getting this even after making a successful connection.tsh:invalid options -- 'c'\nI am trying to execute this command from my .Net 6 application through Renci.SshNet library.Thanks in advance T...
Resolved! Cisco 9130AXE not profiled by ISE
Working on Dot1x at the moment and having an issue with ISE 3.1 not profiling an Cisco 9130AXE.I have run the update from the feeds, this downloaded the profile for the 9130AX I then added to the correct group but it is not authorized.Followed the sa...
Hello Experts I uploaded new cert and applied but its working on the secondary node but not on the primary node. ANy suggestions ? Thanks,
Hi All,Apologies for such hysterical title, but I am seeing something odd.We have two physical (3515) Cisco ISE deployment running version 2.7 Patch 9. Node 1 (PPAN, PMnT, PSN, PxGrid) and Node 2 (SPAN, SMnT, PSN, PxGrid)I am seeing authentication fa...
Resolved! Profiler Queue Size limited warning
In the following message, what is the significance of the number in Profiler Queue Size Limit Reached : Server=vISE45; Profiler Error Message=16170 Forwarder endpoints dropped; Does it mean 16170 end attribute where dropped?
Resolved! CSSM on Prem version 8
HI deployed New CSSM ver8 , while adding existing Smart account and Virtual account getting message selected virtual account already part of this Smart account . Would like to know who to add the existing Smart with. Virtual account to Sync in on Pre...
Dear Community, Does anybody know how the audit posture conditions are evaluated? Based on my understanding the audit conditions should be used to determine if a condition is good to go before changing it to mandatory. Right now we have 2 mandatory a...
We are designing AP - WLC - ISE - AD SERVER. We plan to use PEAP MSCHAP-V2. I have a few questions. 1. Does the client need to set the wireless adapter's profile?ex) 802.1X user or computer authentication, WPA2 ENTERPRISE 2. Do I need to install a CA...
Need some advice. We use ISE for authentication for the Cisco anyconnect VPN. The default authentication is to use a Identity store that uses Windows AD for authentication. I want to add an authentication policy based on the client IP address so if t...
Resolved! ISE3.1 network device groups hierarchy
Hi, I am new to ISE and try to implement it. But I am confused by the hierarchy of NDGsFor example, I created a parent group called Building A using All locations as root group.And then I created two child groups of Building A, called them floor 1 a...
Hello,I've recently ran into an issue in which I'm being locked out of my account consistently throughout the day. I figured that my credentials are stored somewhere on a device that continues to use my old password as this started happening a few da...
Hi I have problem to connecting between wireless client to second switch/server behind it.I have 2 firewall (WG, FG), 2 core switch (Catalyst 3750-X), WLC (2504), DHCP Server using win srv 2008. here's the problem, for client that using LAN cable it...
Resolved! Disable ISE Posture
Hi, guys. Is there any way to disable Posture in ISE? Is it enough by checking the option "Offline" to avoid policy posture updates automatically? Best regards!
All, I have the following situation: We have Passive ID enabled and working correctly. pxGrid is configured and working correctly. Our authorization profiles have reauthentication timers enabled. Our active path authentication is PEAP computer au...
