Network Access Control

Hello, I have some questions about FTD and AD user mapping. For example there are some rules in Access Control Policy: If user1 is member of GroupA, then he has access to Server1, if user2 is member of GroupB, then he has access to Server2. But if th...

We are using fortigate as our VPN concentrator. We are using Fortiauthenticator for MFA. The flow isUser -> Fortiagate -> Fortiauthenticator (Synced with AD for MFA).Now we have added ISE between this flow.User -> Fortigate - > Cisco ISE (Synced with...

Hi all, Can we authenticate Fortigate VPN users from Cisco ISE & can we do posture check on them? If yes can anyone help me in creating Network Device profile for Fotigate Firewall on cisco ISE & how will the redirection work for users to Client Prov...

Hi Guys, Currently I am migrating my current DHCP server to a new one. During assessment, came up an idea why bring the guest access to the new DHCP server. Usually the users are around 200-500. So here is the network flow. Guests will connect to the...

Hi, We have an old ISE appliance and we would like to decommission that and do the complete wipe.We are unable to use the utility tool which does the factory reset.I see that the command application reset-config ise does the policy database wipe. Wha...

Do all Cisco products support both cisco-av-pair and cisco-avpair format? Documentation doesn't seem to stay consistent implying that both work.

Hello, I have an issue with an ISE depoyment (2.6) not performing the appropriate redirection for sponsor portal. Normally when accessing https://sponsor.portal.fqdn/ we are redirected to a URL containing the portal ID like https://sponsor.portal.fqd...

Hi, We have the following ISE deployment with maximum number of session 5000:Node 1 - Running Admin(Primary) + MnT (Secondary) + PSN [CPU 14, RAM 24GB, Disk 600GB]Node 2 - Running Admin(Secondary) + MnT (Primary) + PSN [CPU 14, RAM 24GB, Disk 600GB]N...

I have configured ISE in my network for user authentication ,the problem is new user fail to login because a PC doesn't get IP address until I remover ISE configuration from switch port  .What do I need to do for new user to be authenticated without ...