Network Access Control

Overview:A customer has 2 sets of Standalone ISE that is in HA Primary and Secondary.Currently in ProductionModel: SNS-3655-K9Software Version: 2.7 Patch 2Older ModelModel: SNS-3595-K9Software Version: 2.7 Patch 1 Objective:1. Customer would like to ...

I've been trying to add an IP to my interface gig 0 but cannot. I'm in CLI via SSH.. configure interface gig 0 ip address 192.168.1.223 255.255.255.0 I'm not prompted with the Yes or No prompt like I should be. When I type show interface gig 0, there...

We have already Microsoft SCCM and we have Cisco ISE, our design now is built on MAB authentication, but we need now to move to DOT1X, the problem we see is that we use SCCM to deploy Windows images to the new machines so they will be just a bare met...

Hello, customer asked for upgrade from ISE 2.4 to 2.7 but afraid of EoS for 2.7 soon. Do we have known date when 2.7 will be announced EoS please?

Is there a way to remove a scheduled report done by another user?

Dear community, Has anyone faced the issue with 802.1X auth for cisco IP phone 6921? I ran into this problem a few weeks ago, already 3 devices of this model stopped authentication via NAC, and I can't find the reason behind this issue. I know that 6...

Hi Guys,   We have an issue with Cisco ISE 2.4.0.357 patch 13 + wireless Guest portal to Azure with SAML, the configuration was work properly until last week. We have changes at last month to enable MFA on all azure authentication, but the issue just...

Hi,   I'm looking for advice on a distributed PSN deployment with SXP services enabled.   When enabling the SXP service on two PSNs,  I understand that I have to duplicate the SXP connections on each network device pointing to each PSN IP address, co...

Hi All, We have a primary and secondary HQ in the UK and then large branch offices in the US and Europe. Total users is ~ 2500 What we are looking to do is deploy a primary admin, monitoring and policy services node in HQ1, a secondary admin, monitor...

Hi guys, Do you have any recommendation/best practice how to purge inactive endpoints from the database, in order to keep it clean and tidy, let's say, anything inactive for more then 100 days?  I am running Cisco ISE 3.1 with Essential licensing. Th...

Hi,  at Operations > Reports > Reports > Diagnostics > Key Performance Metrics there is a gap in stats between 0700AM and 1000AM:   The CSCvp15681 KPM Report has no stats entries for 7AM and 8AM Slots Every Day,: ISE 2.7 P6 and 2.7 P7 (released on ...

Hi,   Although I can statically map a subnet to an SGT on the "IP SGT Static Mapping" section on ISE, this is not been advertised via SXP to the devices, only /32 IPs are advertised. It is not possible to publish /24 subnets?   Regards,

I have question when integrating cisco ISE with Aruba switches. Does policy based automation will be working with aruba JL256A switch? Thanks in advance

I see sandbox resources for DNA and ISE, ISE MUD but do you have one for those who just want to learn/practice with ISE?Access to RADIUS servers, LDAP servers etc...I tried using the MUD sandbox and it's fine for some learning but there doesn't seem ...

Hi, I need to renew Admin / EAP / PxGRid certificates on my ISE deployment (2 PAN / 2PSN), that would expire at the same date   I've been throught this article https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217191-config...