Network Access Control

Community, I have a requirement for DOT1X authentication using multiple vrf-aware RADIUS server groups on my Catalyst 3850. 16.3.6 Denali. I have followed the "vfr aware aaa" documentation.   aaa authentication dot1x black_list group black-radius (fo...

I'm using ISE as a NAC (Network Access Control) and wondering if I can run multiple policies to the same device. I mean how I can allow multiple policies in the "Policy Set" window match and apply on the same device. Is that possible on ISE ??

Hello Everyone,   I am facing some issue during ISE posture check with Juniper EX4300/EX4600 switches.   Can someone help with juniper switch Profile setting in ISE and configuration require on switch?   Dot1x is working fine but not posture.

Hello Community, I plan to reinstall an ISE PSN from a 4 nodes deployment. The PSN is currently joined to the AD domain. What is the best practice regading the AD joining for the PSN node? Should I first delete the PSN Computer account in the AD and ...

Hello,I am running into an issue where after updating our ISE node's cert for the Admin, Portal, and RADIUS DTLS services, it continues to serve an old self-signed cert that has been deleted from the server. I verified that the cert is Issued with ou...

Hello Team, We have a requirement from Customer for deploying Cisco ISE 3.1 with Intune for Windows patch management Does anyone faced any challenges in achieving this?  We are already having few compliance checks defined, additionally we need to ach...

Hi all,I've two SNS-3515-k9 with ISE 2.4 preinstalled. I'm going to delivery to customer's network and I would update to the last version CIMC and BIOS as well.I've just saw that new firmwares are released couple a day ago with upgrade guide too. By ...

I'm looking for a simple example of a GET in Python for the new Open API  (similar to those available with the ERS API).Example: I can paste the following into a browser, and it works just fine:https://<ISE_SERVER>/api/v1/policy/network-access/policy...

ISE 3.1P3, C9300 6.12.3I am trying to get SXP with enforcement configured, but the AND will not download the PAC. Error messages in the ISE live logs show a failure due to EAP-TLS handshake failure. I do not have Radius DTLS checked. lab-c9300-2#show...

Can i get any reference documents or link to implement Two factor authentication for VPN users using ISE and external identity source Azure Active Directory?

Hello Team, I have a customer deployment that is using Windows clients with machine only authentication.  A certificate is downloaded via GPO whilst in monitor mode of ISE. When I transition to low-impact mode, everything works fine except where the ...

I noticed that I have a backup job that I cancelled and it is hung up and never finished. How do I go about getting this resolved. I have tried to force to cancel the backup through CLI but that did not work. 

Hello, I am trying t configure CLI access with ansible by following this tutorial:ISE CLI with Ansible - Cisco Communityand on Ansible I'm getting:fatal: [ise]: FAILED! => changed=falseinvocation:module_args:answer: nullcheck_all: falsecommand: show ...

Hi Folks, i have some Brain/Knots in my head regarding the following situation: 1. Customer wants Sponsored Guest Access and Guests should not get the Splash Page every time they associate to the WLC2. There are 3 Guest Types in our deployment: 1 Day...