I have this set up as a dynamic vlan through domain AD. If the user belongs to this AD group, they get vlan 12. All of the ports are configured with vlan 10 (external USER). If an external user connects his PC to each switch port, and he does not b...
Hello,As a title, in Certificate Provisioning there are four types of Certificate Download Format, but I don`t know which format I have to select.I just want to generate the certification and import it into Client PC for EAP-TLS communication.So, Wha...
Is there a way to add one of two fields into the Cisco ISE Endpoint Analysis Tool for collection.1- AD-Operating-System or 2- Operating-System-Result Am I just missing where to add these field or are they not collected?
Hi guys,Can I set get/post somewhere in ISE like this aruba clearpass guest page because h3c switch seems can't support get and i want to use ISE to make the portal function run well.Thanks.
Hello-I have a customer that is interested in ISE that is currently using OKTA for their 2FA/OTP. They want to know if ISE and OKTA can integrate together to provide:2FA/OTP for RA-VPN users utilizing ASAs and AnyConnect2FA/OTP for RADIUS/TACACS+ bas...
HiI have Cisco ISE with AnyConnect supplicant. I would like to move completely to TLS1.2 only but as I checked some users are still connecting via TLS1 and others via TLS1.2 (yeah, in ISE all TLS versions are still enabled). As users connecting to th...
Hello Which encryption algortihm uses ACS in 5.8.1 version? On 4.0 documentation I found that was AES 128: About the ACS Internal DatabaseFor users who are authenticated by using the ACS internal database, ACS stores user passwords in a database whic...
What is the best way to perform authentications using the anyconect agent? I am trying with EAP-TLS and it is not working properly.
Hi, We are downgrading Cisco ISE from 3.0 to 2.7. via USB and CIMC. but unfortunately we re getting errors.attached is the screenshot separately..
We have a distributed deployment, with HA pair in Corp, and secondary nodes in remote offices. We use ISE for TACACS (for NADs), and RADIUS (for user VPN/Wireless).The Primary (HA pair), have RADIUS Sequence to forward to RADIUS/DUO proxy (located in...
Hi ExpertsWe've Remote Access VPN configured on the ASA (9.8) which is authenticated and authorized by the ISE (2.6) with the posture enabled. Now we'd like to upgrade the Anyconnect (4.8) to 4.10 on the end-users PC.1.Whether users can download or u...
hello guys, which step did i do wrong, can't see authorization and the switch can't see online users.thanks a lot..
Can someone tell me what is possible with Cisco SecureACS v4.2 and use of a SmartCard as far as logging in to a Cisco router/switch via SSH?In our environment we log into our workstations with a CAC/SmartCard and do not have any form of username or p...
Hi, I've configured a Cat9300 running Gibraltar 16.12.3 to retrieve its CTS PAC but it is not working. This is my current config: 9300-access#sh run | sec radiusaaa group server radius ise-pacserver name ise-pacaaa authentication dot1x default group ...
For one day last week, my Cisco ISE Primary Admin/MNT attempted to communicate with http://moleman.w3.org and it was blocked by our Internet firewalls, as it should be. However, this triggered security alarms in our environment. The Cisco ISE 3.0 in...
