We are planning to install patch 10 on the 2.6 version. We have patch 7 already installed with a couple of hotfixes like Log4j and another bug. My question is, do we need to remove the hotfixes before installing the patch 10 and then again install th...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! Smart licensing
Our ISE is smart licensed till yesterday all the license were showing in compliance. Today i observed an alarm stating smart licensing Authorization renewal failure. When i checked base license was showing released entitlement with the consumption co...
Questions on ISE, if I can get some definitive answers on how it works? 1. Grace period - when does it start? * Can it be pushed manually onto a client?2. Windows updates - when non-compliant shouldn't the update still run if allowed from an int...
Hi all,i'm stuck with a problem related to DHCP packets. The architecture is composed by:VXX 201 IP phone which is connected to the catalyst 3650 on gigabit 1/0/46(it authenticate via MAB)Catalyst 3650 which has a trunk interface (gigabit 1/0/48)ISE ...
Resolved! Accessing Home Thermostat Remotely
Hello! I have a weird question.. I just can not figure it out. I know by default there are no access rules, therefore blocking, anything incoming. I am running an FPR1010. I installed an Ecobee Thermostat 2 weeks ago and remotely, I am able to change...
Hi All I try to test user and password from ISE to AD but it show authentication result fail but I can join Cisco ISE and AD and i can see all group user on AD from Cisco Cisco ISE and AD can communicate with name can ping with name work and NTP is c...
Hi all,i'm facing some problems with DHCP snooping config. The scenario is the following. An IP phone is attached to the Catalyst 3650 switch. The switch has a SPAN port that has as source interface g1/0/46 (interface to which the phone is connected)...
Hello team, We have a customer who doesn't have WSUS and would like to check for critical windows patches. I'm doing a check through the WUA (windows update agent). But, this flow is not working well, because AnyConnect takes a long time to check a...
Resolved! ISE TLS 1.0 Report
Hi All, is there any way I can see what users are using TLS1.0 and export that to excel? or maybe if there is an API that can report that? reporting
Resolved! ISE and Windows drive mapping scripts
We are using ISE authentication and posture assessment for VPN and wireless and need to figure out a way to have the drive mappings script run after posture assessment is complete and successful. I know AnyConnect can run scripts but has anyone done...
I have an ISE environment that we use for Tacacs, we are running version 2.6. The issue that I have is that for whatever reason, someone renewed the production TLS certificate on the primary admin node but didn't update the other nodes. So now wh...
Hello,In my environment, Cisco ISE 2.2 is being used as the RADIUS authentication server for a WLAN that uses WPA2 and 802.1X for authentication. On Cisco ISE, Network Access Users have been created for the users using that WLAN who basically use a U...
On an ISE deployment that is running TACACS for access control of network routers and switches, is it possible to get the IP address of the user end-stations to display in the details of live logs? ISE 3.1/operation/TACACS/live logs/you can see that ...
Hi,Would anyone know if it’s possible to download older versions of Cisco AnyConnect from Cisco directly? For example I’m looking for version 4.5.0.We have an SRX with an old firmware that can’t be upgraded, and there’s a known DHCP addressing bug w...
I have an ISE deployment with 2 PANs and 2 PSNs. Primary PAN, node A, had to be replaced due to hardware failure. node B was promoted temporarily so I can continue to manage ISE. I need to install the wildcard cert back on the new node A and promo...
