Hi, I have 2 Cisco ISE in HA in version 3.0 Patch4 and since a few days ago every time I enter the EndPoint classification and try to edit one of them to modify the description, I get an error. It says this The error pops up because the Attribute Va...
Hi,We have a hybrid deployment with version 2.7 with base license and 5 small VM licenses.We are planning to upgrade to 3.1.What is the recommended option for license conversion?Should it be before or after the version upgrade?We are having smart lic...
Hello guys, please I have this problem 802.1X, i'm trying to connect this nex laptop to the company network but it does not want to connect and when I opened the WLC I found this when I typed show ap.So how can I resolve this ?Dynamically Disabled Cl...
hi we want to check ise old logs (logs which are 2 weeks older). but under rasius live logs it shows logs of last 24 hours only. basically we want to filter 1 incident occured 2 weeks ago from particular NAD AP. Thanks
Hello Cisco ISE Experts, The customer is concerned about Switches with broken SXP or incomplete TrustSec configuration etc. What are the strategies for checking 500+ switches for health? The core is configured for SXP and distribution and edgefor inl...
Is there a way to troubleshoot or validate that Cisco ISE is sending syslogs to a "Remote Logging Target"?I'm trying to set this up with QRadar however its showing that its not receieving any logs from ISE. I've confirmed that IBM has ISE packages to...
I'm seeing a lot of mixed results but I'm trying to figure why my time on ISE is wrong. Its off by an hour and I currently have it set for EST. I found a bug online CSCwb01843 where I would think that the daylight savings time would adjust automatica...
We have Cisco ISE deployed in our enterprise environment for Authentication, Authorization and Accounting. But other than Cisco devices, none of the OEM devices like Juniper, HP, Huawei etc., accounting logs are not showing in ISE. However, Accountin...
Hi team, I have a quick question regarding the AD authentication and the way how ISE does authenticate users from AD. So far I see, it is based on AD groups. Is it a way to set up a policy/condition for a specific user in a group instead of allowing ...
Hi,I have an environment where my authenticator is an IOS router and my supplicant an IoT endpoint. I'm trying to do EAP-TLS to authenticate the endpoint.The authenticator will send the first EAP-Request to get the supplicant Identity with an EAP Id ...
Hello team,Have anyone of you experienced with upgrade the ISE Evaluation 2.7 to 3.1 ?I somehow facing a problem in the "Prepare to Upgrade" stage as the "Platform Support Check" states that it needs at least 12 CPU for the upgrade.I check on the eva...
Hi , Everyone The EoS/EoL information for R-ISE-VM-K9 is announced by Cisco.https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/eos-eol-notice-c51-741254.htmlAnd it will be EoL on February 28, 2022. But the document de...
Hello,I have dot1x enabled on all ports including those to which APs connected.My scheme is like this:clients -- Access Point -- Access Switch -- Access Switch -- Access Point -- Clientswhen a client moves from one AP to another, his mac address stay...
Currently I'm using ISE in front of most network devices and referencing an AD group for admins. That group membership isn't changing, but I do need to move it to another OU within Active Directory. What changes do I need to make in ISE, if any, si...
Good Day I have deployed 2 ISE Boxes at a customer Primary/Secondary nodes with Smart Licensing. The smart licensing works fine but after registering the secondary box I got this notification. A Secondary administration node is added to deployment,...
