Looking at changing our router/switch environment to use MFA with ISE/Okta. Trying to find any information on this hasn't turned up much. I am assuming i need to change the AAA to use Radius, but unsure how to go about the rest. Right now with ISE ...
ISE 3.2 Patch 6We are having a recurring issue that is really becoming a problem now with some MAC addresses dropping their identity group after being placed into one.Example:1) Add MAC address to Identity group through Context Visibility -> Endpoint...
Good Day, Community,I am an ISE operator, and I have been tasked with resolving the issue of Apple Macs occasionally failing to respond to EAP-Request frames and frequently failing to send EAPOL-Start frames upon link-up in a wired 802.1X environment...
Good Day, All,We are currently encountering a problem where a small number of MacBooks are failing to process Identity Request packets for wired authentication before the connected ports are falling back to MAB. This seems to occur when the devices ...
Hi there! I have my own Grafana environment (separate, self hosted, v9.2.10 direct connectivity with Cisco ISE) and I would like to import Cisco ISE metrics as Data Source (assume via Prometheus) - instead of using native Grafana view within Cisco IS...
Hello, I notice this issue in version 3.3 patch 3. Is there any fix / patch for this issue? Thanks
I have a two node ISE deployment at version 1.4. I will be performing an upgrade to the version soon and my research has found that I need to perform a backup of my certificates and keys using the CLI. I have searched the forums and general internet ...
Hi colleagues, This question is part of a M&A integration were their Identity Store for authentication and authorization is Entra ID, but we don't have Advanced licenses to connect with InTune so need a manual workaround to deny machines with revoked...
Running Cisco ISE v3 with 6 PSNs no load balancer across a campus network.On 3 individual occasions over the last few weeks clients have stopped authenticating and we have seen the health score drop. The workaround has been to restart the ISE servic...
Hi all We try to add network device groups to all Location with python headers = {'content-type' : 'application/json', 'Accept':'application/jsson'} payload="{"NetworkDeviceGroup" : {"name" : "Location#All Locations#AA","ngdtype" : "Location","desc...
Dear All, We are using ISE version 3.1. Users are accessing the internal network via wireless connectivity on WLC 9800-L version 17.9.4. We have configured a posture lease (1 day), enabled LSD, and no PRA. Here's the issue: Users are randomly t...
Hi, trying to figure out how ISE will count licensing when 1 laptop is connected at same time through wired 802.1X either wireless. The situation is, that we are pushing WiFi profile to all Windows machines through GPO and setting there "automaticall...
Hi, Been struggling to get this to work and to find if it's supported. Is the One Click Sponsor approval via email supported when using EntraID REST as External Identity? When configuring a Sponsor Group, I'm able to set the Other Condition to the Ex...
Hello, when creating a guest account i'm unable to modify it's validity duration from the date menu, for example, it is not possible to shorten the validity period from the default days related to the group. I'm always promped "mobile number not pres...
Added more served to PSN level , resolved the issue. Which logs to check in real time to identify such issues.
