Network Access Control

Resolved! Best way to change configs remotely for switching from ACS to ISE?

i want to change my devices from acs to ISE doing it remotely without getting disconnected by changing the configs,do you recommend tftping download the config to the devices and save it as startup config?am guessing if i delete aaa commands while ...

Resolved! ISE PSN reboot impact especially for posture check

Hi experts,I probably should do more reading myself but I need to get this done quickly so appreciate any direct answers.I need to reboot the PSN nodes as per the TAC for some certificate/portal page problem and I have never done that before so I wan...

Resolved! Q: ISE Licensing: Anyconnect Apex License

Hi, Regarding ISE Licenses, I would like to know what the Anyconnect Apex License is for. Is it the same as Apex License? We have an existing anyconnect apex license on paper but I cannot seem to locate it in ISE Web GUI under Administration>License,...

Resolved! Smart Licensing issue ISE 2.4 patch 14

Hi, I need to upgrade from ISE 2.4 to 3.0, before doing so I converted my traditional Licenses into Smart, these Licenses are now appearing in my Smart Account. I initially used the Transparent Gateway option as the connection method and entered a to...

Resolved! How to learn python with data science

Hello cisco community, I am new here at cisco community.As a beginner want to learn python data science to make my skills saleable. Can you guys guide me how to take a path from beginner to advanced technology. Regards,techrotten

ISE - Repport Top N authentication NAD doesn't display information

Hello, On our 2.6 patch 8 ISE, it seems that the Top N Authentication by Network Device doesn't show any information since two days.I haven't found any bug about that or workaround to solve this issue.

ISE 2.4 MAC addresses already learnt by ISE, do not show up in add endpoints in identity group

Hi Everyone, I have a standalone ISE deployed at customer premises with WLC. We need to add any endpoint in the relevant identity group the mac address does not show up in the field. Even the mac address is already learned on ISE. This used to work p...

ISE does not send CoA to WLC

Hi, we are facing a weird issue with out ISE (2.4) and our C9800-CL WLC (17.3.4). We have a Guest WLAN in flexconnect mode with CWA using a sponsor portal. What I have seen so far in my tests: - Users are able to connect to guest SSID and get redirec...

Resolved! ISE upgrade

Hi all, I'm planning on upgrading four ISE servers in a cluster from 2.4 to 2.7 that are running on VMs. Is it possible to upgrade it by removing a node and then installing a new one with the new version to then add one by one replacing the ones with...

Resolved! Passive Identity using Syslog Provider, no Live Sessions displayed

Hi,I have a VPN firewall (ASA) sending syslog to ISE (2.7 patch 6). ISE has Syslog Provider configured for passive identity feature. ISE is also configured with AD as PID provider using WMI. The VPN user testuser1 is an AD user account. When a user (...

Resolved! Authenticate users in my python application using RADIUS on Cisco ISE

Hello, I'm working on a project where I need to authenticate and authorize users in my python application.I want to use Cisco ISE as my Radius server, but I can't get it to work. Does anyone know a good tutorial or know if its even possible. Using L...

Resolved! ISE: Cannot continue ip address change as APP_START is running

how can i configure the extra interfaces for ISE?

SXP mapping expiration

Hi,I have a question regarding SXP mappings expiration in ISE.From the Trustsec Workcenter in ISE, there is the "all SXP mappings" view where ISE shows the IP / SGT mappings I have also an ASA which have a SXP connections with ISE to get all the mapp...