Resolved! ISE with OKTA as Identity Store
Is their any guidance or documentation on using ISE with OKTA as the identity source? Can ISE use groups created in OKTA to do fine grained access control?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
I had an unfortunate experience today after a few hundred wired MAB devices stopped working - the reason was that the vendor's MAC OUI Identifier changed (due to an ISE Profiler Feed update). The reason for the MAC OUI update in ISE, was that the ve...
HelloWe are implementing mab for our IP-Phones.I made an authorization policy to assign a dynamic vlan to them once authenticated. The authencation passed and authorization policy matched but in addition to the dynamic vlan, they are getting the defa...
I want to Install public certificate for ISE. and Endpoint must use local PKI certificate for authentication.is it possible?
Hi everyone, We are hosting an exclusive AMA about ISE on 4.13.2023 and you have a chance to win Cisco Swag! Subject matter experts, Thomas Howard and Charlie Moreton will answer all of your questions live. So put your thinking caps on and kindly add...
Resolved! SXP configuration
Hello we are implementing TrustSec here and we have 2960x (only SXP speaker) as access switches and 9300 (enforcement) as core. I understand that, 9300 must receive IP-SGT mappings from other access switches by establishing an SXP communication with ...
Hey. I want to set allowed or denied commands on Juniper routers and switches while users are authenticated/authorized with Cisco ISE 3.1. This is possible to define local "allow-commands" or "deny-commands" and use user classes locally on juniper d...
Hi, Is it possible for ISE to send email notification to Guest Wifi users using Twilio email gateway ? Would appreciate if you can share any documentation on how this can be done. Thanks Eng Wee
Hi AllHope you are doing wellIm planning to deploy Cisco ISE 3.0 for Device admin and guest access. Planning to install and pair of PAN,MNT and PSN will be installed at 2 location for redundancy.I was just going through few documents which says for ...
Hi everyone,When we deployed F5 and ISE PSN's, we used the documentation provided by Cisco where the values were:Source address – 180shttps_sticky – 3600sradius_sticky – 3600sMeraki Wireless default settings are configured as 10 minutes for interim a...
Hi All,Our company deployed Cisco ISE system to control PC clients access LAN.I have a question:I'd know a MAC address and I want to deny this MAC address to access our company LAN?What step should I do it?Thanks a lot !! BR Frank
Hi Team, Greetings! Just want to ask a question. we've encountered an "issue" with our customer ISE. Our customer Environment have a WiFi / SSID connected with ISE 3.1 and for the guest to login, it integrate with Azure-SSO (using SAML) and used the ...
Resolved! Operational backup failing ISE 2.7
Hi everyone!! My Cisco ISE 2.7 patch 9 deployment Operational backup doesn't work since some weeks ago (weekly scheduled backup). We have the same repository for different backups (Operational, Configuration, Policies... and other reports...) and onl...
Resolved! Cisco ISE 2.7 Perpetual License
Hello, I have Cisco ISE 2.7 in HA (VMs) with 25000 Base licenses and Device admin license. I have a question regarding licensing: If we do not upgrade to version 3.1 should we be able to use ISE after October 31 2023?
Hello, In our ISE deployment, we've alcatel-Lucent phones. For now the phones are authenticated with MAB, but all phone's support Dot1x . I've checked and downloaded certificates from the website of Alcatel Lucent. but still the phone's said Dot...
