Network Access Control

I keep hearing about “Zero Trust with ISE,” but in every environment I test, it’s half-baked — VLAN hopping still possible, NAC bypasses everywhere, and ISE policies left at defaults. Has anyone seen a real-world, properly implemented ISE deployment ...

Hi,We're currently at ISE 3.1 patch 10. We intend to upgrade to ISE 3.4 patch 3 which is marked as suggested version now in Cisco's download portal. Since we've had many problems even with suggested software versions, I don't value a star in a Cisco ...

Hi All,Recently, we migrated our enterprise Wi-Fi authentication method from PEAP to TEAP (inner auth EAP-TLS). Since then, many users have been experiencing disconnections while their sessions are active.In the morning, the Wi-Fi connects and works ...

  Hello Cisco Community, I’m looking for guidance on whether it’s possible to back up and restore only the Sponsor Portal users, without affecting other users or the full system configuration. Specifically: Can Sponsor Portal user accounts be exporte...

I implemented Cisco ISE using EAP-TLS for user authentication. Authentication works fine for the machine owner only. However, when other users log in to different machines, authentication fails because their certificates are not installed on those ma...

Hi, Our customer wants to add a new Microsoft AD with a different domain. Scenario  Domain A xzy.com Domain B yyy.com We are using TEAP for DOT1X authentications. How can i authenticate computer/users with two domains and Ads? Do i need to change my ...

Hi All,We have ISE deployment in distributed deployment architecture with two PSN nodes and two PAN nodes. In the PAN failover setting the primary health check node is set to PSN01, and the secondary is set to PSN02. We are currently seeing alarms st...

Hello Greg,  @Greg Gibbs  Refer to your KB https://community.cisco.com/t5/security-knowledge-base/cisco-ise-with-microsoft-active-directory-entra-id-and-intune/ta-p/4763635#toc-hId-2135119435 and section - "Entra Joined Device and AD User with TEAP(E...

When we cycled our ISE 3.3p4 deployment for p4 updates, specifically when cycling the PSNs our network took a big hit that took about a week to fully recover from. We are still in a bad way since what we've found/identified in our environment is stil...

ISE Version 3.3DNS Server (windows 2025 server)   192.168.3.5Please see the error messageError Description: Failed to find domain controller, please check network connectivitySupport Details...Error Name: LW_ERROR_FAILED_FIND_DCError Code: 40049Hello...

LAN adapter showing Authentication Failed even when it is failed back to MAB. At least this is i am seeing for Windows 11 machine.  User machine has Windows LAN Supplicant enabled ( Wired AutoConfig ) and certificate options are selected from the LAN...