Network Access Control

Hi All ,We have ISE 3.0 setup for one of customer. I am trying to build posture condition to validate if windows 10 endpoint has latest critical security patches installed.Customer do not have WSUS or SCCM which can be leverage under patch management...

The design of our new ISE cube has two SNS-3655 nodes that will act as the Admin/MnT/PSN on each. I am wondering if it is possible to run 3 dedicated connections to the appliance to separate the traffic based on the persona. When I look in the deploy...

Hi Community, Getting following alarm on ISE (3.1 Patch 3), which doesn't seem correct. "The required minimum of hard disk(s) total size is 300 GB; found only 0 GB on node isemnt" VM has 600 GB disk Space. High Load Average: Server=psn4(on all PSNs)...

I have a requirement to restrict the Hotspot Guest Portal usage based on a schedule. eg. 7am to 7pm, Mon to Friday.I know I can define access hours with guest types. It is a hotspot portal in ISE and I can't seem to assign the guest type to the porta...

Hello, I'm working with the ERS's API and i'm wondering if there is another type of auth other than the basic, because the basic method only encrypt the username and password in base64 format wich can be very easily decrypt if you get the encrypted l...

Hi, What options are there for enforcing SGT policy as close to the Virtual machine/application as possible in a VMware environment? I know previously we could have used the Nexus 1000V but with that no longer being solved, is there a solution for th...

Hi guys,I'm getting the CiscoAVPair like this, and i wonder what does CiscoAVPair coa-push=true mean, it's already a coa message, what will it make switch do, i haven't find this attribute in other documents.Many thanks.CiscoAVPair subscriber:command...

Hi community. First, I'm studying the ISE so I'm simply a beginner. However I've managede to integrate my NAD's with Tacacs+ and authenticating with AD.It's a pure lab setup, with a ISE 3.1 and 4 switches, DC, with CA.Client1 (win10) have their certi...

I have a 9500 switch with just AAA new model configured, nothing else.  I want to remove it so that I can then configure login local under the VTY lines.  Can this be done and does it require a reboot?  Or is it easier to just globally configure the ...

Hi to all. We have just upgraded an ISE Deployment based on 2 nodes from 2.7 to 3.1. We follow this beautiful doc: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/upgrade_guide/Upgrade_Journey/Cisco_ISE_3-1_Upgrade_Journey.html In the post upd...

HiWe have an exisiting ISE deployment and I am in the middle of trying to set up anyconnect, would I be best creating a new policy set for  anyconnect use and would this interfere with the esisting Policy Set.?Also whats the best way to create a Radi...

Can we copy files between local disk of two ISE nodes which are in HA. I am having file in primary ISE administration persona, need to copy the same to secondary persona for faster file movementCan we able to achive it

On ISE I have deleted SAML and PxGrid certs because I don't need them, I'm left with an externally signed certificate for portal / admin and EAP, on it's chain I don't see any certificate from "deployment > System > Certificate > Certificate authorit...