Hello, Anyone know if TRELLIX will be added to the list of vendor names in the ISE Posture Condition configuration ? Thx a lot !!
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hello,I have a question about ISE and external MDM server integration. Which nodes is making API call to the external MDM server ? Is it PAN only, PAN and PSN ?I didn't find anything about that on the Cisco documentation.If anyone can help,Thank you,
Hi, I have 2 Cisco ISE in HA in version 3.0 Patch4 and since a few days ago every time I enter the EndPoint classification and try to edit one of them to modify the description, I get an error. It says this The error pops up because the Attribute Va...
Resolved! License conversion from 2.7 from 3.1
Hi,We have a hybrid deployment with version 2.7 with base license and 5 small VM licenses.We are planning to upgrade to 3.1.What is the recommended option for license conversion?Should it be before or after the version upgrade?We are having smart lic...
Resolved! 802.1x issue
Hello guys, please I have this problem 802.1X, i'm trying to connect this nex laptop to the company network but it does not want to connect and when I opened the WLC I found this when I typed show ap.So how can I resolve this ?Dynamically Disabled Cl...
Resolved! how can we see ise old logs ?
hi we want to check ise old logs (logs which are 2 weeks older). but under rasius live logs it shows logs of last 24 hours only. basically we want to filter 1 incident occured 2 weeks ago from particular NAD AP. Thanks
Hello Cisco ISE Experts, The customer is concerned about Switches with broken SXP or incomplete TrustSec configuration etc. What are the strategies for checking 500+ switches for health? The core is configured for SXP and distribution and edgefor inl...
Is there a way to troubleshoot or validate that Cisco ISE is sending syslogs to a "Remote Logging Target"?I'm trying to set this up with QRadar however its showing that its not receieving any logs from ISE. I've confirmed that IBM has ISE packages to...
Resolved! Cisco ISE NTP Showing Wrong Time
I'm seeing a lot of mixed results but I'm trying to figure why my time on ISE is wrong. Its off by an hour and I currently have it set for EST. I found a bug online CSCwb01843 where I would think that the daylight savings time would adjust automatica...
Resolved! Accouting logs issue in Cisco ISE
We have Cisco ISE deployed in our enterprise environment for Authentication, Authorization and Accounting. But other than Cisco devices, none of the OEM devices like Juniper, HP, Huawei etc., accounting logs are not showing in ISE. However, Accountin...
Hi team, I have a quick question regarding the AD authentication and the way how ISE does authenticate users from AD. So far I see, it is based on AD groups. Is it a way to set up a policy/condition for a specific user in a group instead of allowing ...
Resolved! ISE 2.3 EAP message format
Hi,I have an environment where my authenticator is an IOS router and my supplicant an IoT endpoint. I'm trying to do EAP-TLS to authenticate the endpoint.The authenticator will send the first EAP-Request to get the supplicant Identity with an EAP Id ...
Resolved! Cisco ISE Evaluation 2.7 Upgrade to 3.1
Hello team,Have anyone of you experienced with upgrade the ISE Evaluation 2.7 to 3.1 ?I somehow facing a problem in the "Prepare to Upgrade" stage as the "Platform Support Check" states that it needs at least 12 CPU for the upgrade.I check on the eva...
Hi , Everyone The EoS/EoL information for R-ISE-VM-K9 is announced by Cisco.https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/eos-eol-notice-c51-741254.htmlAnd it will be EoL on February 28, 2022. But the document de...
Hello,I have dot1x enabled on all ports including those to which APs connected.My scheme is like this:clients -- Access Point -- Access Switch -- Access Switch -- Access Point -- Clientswhen a client moves from one AP to another, his mac address stay...
