Hello,I have 2 clusters, with two nodes each (PAN, MNT, PSN) in version 2.6 and I will upgrade it to version 3.1 using Backup and Restore method, smart licensing is currently in use.the licenses are:cluster1: Tacacs (2), VM Small (2)cluster2: VM Smal...
Problem Statement: The vulnerability below were found in our ISE, would like to know if there are any methods to disable them. If not, is there any roadmap from Cisco to get them fixed. ssl-static-key-ciphers (TCP 443, 8443, 8444) - TLS_RSA_WITH_AES...
Hi all;Please consider the following figure:As you can see, these are two separate authentication methods on the same interface. In this scenario, the PC is connected to a non-Cisco IP Phone and the phone is connected to the switch. As you see above,...
Hi all;This is my scenario:We have several workstations that have "Asus"-based motherboards. Although these workstations have Windows 10 installed, joined to the domain, and the required attributed are all collected from Active Directory probe (like ...
hihaving this error pop up trying to connect to our azure hosted ISE nodev3.2not sure whats happening here as im sure i was connected via SSH yesterday.i can access ISE via GUI and the serial console in Azure.does anybody know how to resolve this? c...
Hi all;I have a question regarding the "Password Type" option when creating an Internal User in ISE. What is the purpose of specifying the AD join point? Thanks
Hi all, I have a case that we must migrate clients using anyconnect posture module for WiFi and Wired access to a new Cisco ISE 3.1. The old ISE belongs to the previous manage services provider. The current situation is that anyconnect points to the ...
I set the account period expiration setting for ISE TACACS users.And when i check the csv file, i can see see the expiration period set.But when I add ISE admin user via TACACS user and check the csv file again, the expiration date is deleted.1. I wa...
We are looking to implement ISE/Azure MFA authentication on some network devices for admin auth, which we have successfully gotten to work. But, some users log into these devices multiple times per day. Is there a way to control or limit the MFA aut...
We are working on one of the customer's requirements where the customer wants to check the Full Disk Encryption State using Trend Micro Vendor. When have created a Disk Encryption Condition by selecting Vendor Name as Trend Micro and Product Name as ...
Hello, I've recently created new Sponsor Group for Service Desk users in a remote location. Access to Sponsor Portal is allowed only for the ures defined in AD group. Is there any way to create a report on Cisco ISE that contains detailed information...
we have a requirement to offer only internet access to non domain computers connected to wired network.so we are using CWA guest portal to authenticate those users against AD and allow Internet only through dACL.we configured 2 authorization profiles...
Hi all, I want to add new Endpoints via API. I'm using this endpoint: POST /ers/config/endpointThe system needs a X-CSRF-TOKEN header. I get this Token before sending the POST Request via GET /ers/config/endpoint with the following headers: '...
We're about to deploy Cisco DNAC, ISE, and WLC across four sites, and we would love to tap into the collective knowledge of this amazing community to gather suggestions and tips for enhancing our architecture.Here's a brief overview of our deployment...
Good Day,Please help me with my Cisco ACS integration issue. I already configured ACS, but when im trying to configure AAA on cisco router and try to login to the router remotely using telnet, i can't login with the credentials that i created on ACS,...
