HiI recently upgraded an ISE deployment from 2.7 patch 7 to 3.2 patch 3. One of the PSNs failed during the upgrade so I deregistered the node and manually installed 3.2 patch 3 before re-registering it with the deployment.All services are working fin...
Per @Arne Bier request from another post Sharing two python scripts that have helped me automate some manual tasks here in our environment. get_img_grp_macs_scrub: Runs and dumps a specific endpoint group to screen and creates a csv file with total...
Hi,I have a problem with Cisco ISE 2.7 guest access. I can see in live logs that clients have been authenticated correctly but after every successful authentication ISE sending a CoA-request for reauthentication. This is happening every 5 seconds and...
Hello, I can't configure the line con 0 with the command login authentication CONSOLE. I get the following error: sy-xxxx-ch-xxx-s-0xx(config-line)#login authentication CONSOLE Command authorization failed. The tacacs is up and running because I'm al...
Hi, I can get bulk create, bulk delete and bulk status (using a bulk ID) to work, but not bulk read. What is the format? ISE documentation on SDK is bad, nothing on bulk read and delete. I tried operationType="get", and operationType="read", with...
Hi all, I'm not a network guy, at least not anymore since I was about 15 years ago. I'm responsible for a self-service portal that I made to allow local IT support teams to register device in Cisco ISE and create DHCP reservation. So far my experienc...
Is it possible to set a maximum value for ise cpu alarm? for exampleWhen cpu is at 60%, A cpu high alarm will appear. If notAt what percentage of CPU is the alarm displayed?
Does anyone know why the iPhone doesn't trust the CA trust certified pushed by Intune (while it works fine if it is added manually)? We're getting 12521 EAP-TLSA failed SSL/TLS handshake after a client alert in Cisco ISE as misconfigured supplicant a...
Hello TeamPlease how to Block NMAP port Scanning from Guest wireless Network ?I have configure Guest wireless. Guest is not able to ping Any ressource But NMAP scanning is working. All Private IP execept ISE, DHCP and DNS is Deny, but NMAP is still a...
Hello everyone,We've recently deployed two ISE instance in AWS cloud in HA, I had to do a domain change to them after the deployment and although the authentication + authorization is working with Posturing checks, I'm not able to view the reports of...
Hi all,Our older PKI servers were running on 2012 OS. We built 2019 OS VM's and then migrated the PKI services/information from the old to the new, keeping Hostnames and IP address as they were.Following this users were not able to authenticate and e...
I plan to apply patch 3 to our 2 nodes ISE 3.2 via CLIDo I need to apply the patch to each node manually or will the patch be applied to the second node once the first node has been successful.
Hi All,We are looking to integrate our cisco switches with Okta radius not only to access the switches but we also want any device or user who gets connected to that switch need to get authenticated before getting access to network.Kindly let me know...
Good Afternoon! We have two ISE servers, just upgraded from 2.4 to 3.0 about a month ago. Yesterday I went through the process of registering the ISE licensing with out smart account using the token. Inside Cisco license manager I can see it formed a...
I have Qualys scan in the environment and it pickups the following with Cisco ISE 3.0 patch-5, 3.1 patch-7, and 3.2 patch 3:TCP Sequence Number Approximation Based Denial of Service (QID 82054)https://success.qualys.com/support/s/article/000002879 An...
