It looks like Cisco took quite long time to release patch 8 for ISE 3.2, it was release at end of November 2025.Now they release patch 9 on Dec 2025. Was there issue with Patch 8. If current system is on patch 7 can we install patch 9 directly ?
I had two ISE VM nodes running on 2.4 ( no patch) with in sufficient resources. I was getting multiple alarms.I made one node primary for both Admin and MnT personas and de-registered the second node. Then I registered a newly created VM node with su...
Morning Cisco Forums,I'm looking for some guidance on the process of replacing ISE administration nodes, in a 4 node cluster. In our current environment, we're running ISE version 3.4p4, and have a primary/secondary administration node, and 2 policy...
We have a global deployment of multiples PSNs ( 2 US-WEST, 2 US-EAST, 2 EU and 2 APAC). Currently we have a single guest hotspot portal with a single URL (guest.portal.XXXXX.com). Each site has a local FortiGate which acts as the DHCP server and a lo...
Hello, i have configured a Sftp server as repository but i'm unable to add the Crypto host_key add host <server ip/fqdn> on the secondary PAN and MON and PSN.The cluster is made of Primary PAN Secondary PAN Primary MON Secondary MON Psn1 Psn2 on the ...
Hi,We have a strange issue where devices that are in an identity group on ISE which in turn get authorised and download a DACL are falling off the network at seemingly random times.Example Switchport:interface GigabitEthernet2/0/23description "Exampl...
Hello, I am trying to join ISE 3.4 VM with Active Directory but Its getting failed and I am getting below logs on ISE GUI. Error Description: Access is deniedSupport Details...Error Name: ERROR_ACCESS_DENIEDError Code: 5 Detailed Log:10:49:39 Jo...
Hi - Is it possible to export the All context visibility information from ISE ?
I keep hearing about “Zero Trust with ISE,” but in every environment I test, it’s half-baked — VLAN hopping still possible, NAC bypasses everywhere, and ISE policies left at defaults. Has anyone seen a real-world, properly implemented ISE deployment ...
Hi,We're currently at ISE 3.1 patch 10. We intend to upgrade to ISE 3.4 patch 3 which is marked as suggested version now in Cisco's download portal. Since we've had many problems even with suggested software versions, I don't value a star in a Cisco ...
Hello friends.Few months ago, I carried out ISE two node deployment and Configured several policies as we were going to get licensed version.Purpose was testing and learning. I almost configured all of things I wanted. Yesterday, I signed in ISE and ...
Hi All,Recently, we migrated our enterprise Wi-Fi authentication method from PEAP to TEAP (inner auth EAP-TLS). Since then, many users have been experiencing disconnections while their sessions are active.In the morning, the Wi-Fi connects and works ...
Hello Cisco Community, I’m looking for guidance on whether it’s possible to back up and restore only the Sponsor Portal users, without affecting other users or the full system configuration. Specifically: Can Sponsor Portal user accounts be exporte...
I implemented Cisco ISE using EAP-TLS for user authentication. Authentication works fine for the machine owner only. However, when other users log in to different machines, authentication fails because their certificates are not installed on those ma...
Hi, Our customer wants to add a new Microsoft AD with a different domain. Scenario Domain A xzy.com Domain B yyy.com We are using TEAP for DOT1X authentications. How can i authenticate computer/users with two domains and Ads? Do i need to change my ...
