Resolved! Do you need Cisco ISE to apply SGT ?
Hi AllDo you need Cisco ISE to apply SGTs to switches? or could you get other NAC software to apply them via api's etc ?Could you apply an SGT manually ?cheers
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi! I have some problem with dynamic authorization. The problem involved is similar to CSCvi28819. But there are some differences. First of all, I have no PxGrid. I have Node Group of two Policy Service Servers. Passive ID with Active Directory co...
Resolved! ISE API downloadableacl GET-ALL
Hello, If I make a GET request to our ISE box to retrieve all of our configured Downloadable ACLs (https://ise-url:9060/ers/config/downloadableacl) I am only returned a maximum of 20. Is there a way to increase this number? Many thanks
Resolved! Ise application initialization
We are noticing that during high authentication volume hours ise application crashes and application status goes to initialization state, after sometime maybe an hour it recovers on his own and goes back to running state. Wondering if somebody else i...
Resolved! Maximum user session issue in ISE 3.0
Hi,maximum session per user in not working in ISE.
Hi Team, I have a requirement to enable web authentication for guest wifi users from ISE. I would like to know how the license will be consumed. I could see tie essential license will be consumed based on radius session. Does it mean the license will...
If you look at the ISE Backup Guide, you will find the following: Note:The ISE Configuration backup includes system and trusted certificates, and does not include internal Certificate Authority (CA) certificates. To manually back up the internal Cert...
Hello, Someone can help me to hide the SMS checkbox form my Sponsor Portal? Thank you for your help.
Resolved! ISE 3.0 Computer Certificate
Hi, There is a way to confirm which certificate the computer is using to authenticate with Cisco ISE? I asking these because in this specific customer they have one certificate for SCCM and other for dot1x from the same CA, and i want to make sure th...
Hi Community,we see partial endpoints that do not contain IP information in the ISE.If we check the endpoint information on the switch withshow auth session int gig3/0/3 detail,the IP information is displayed. Unfortunately we have some profiling pol...
Cannot connect to AD Connector. It may be unavailable due to limited disk space ISE is virtual. The disk capacity on ISE is sufficient. Does it mean that the real server is running out of disk? ISE/admin# show disk disk repository: 18% used (510027...
Resolved! ISE 3.1 patch 3 backup failure
I have a schedule job to back up the ISE configuration everyday to an external sFTP server, running on Ubuntu server 20.04.5 LTS and it has been working for the past two years.Yesterday, I upgraded my Ubuntu server to 22.04.1 LTS and after that backu...
Resolved! New ACL behavior?
Hi,I’m just confused about new behavior by applied, but not existing ACLI remember from basics, that if you try to use an non-existing ACL, it will be threaded as deny ip any any ACLbut today, on catalyst 9500 switch, running iOS-XE 17. Something I s...
Hello community I'm trying to set up ISE to do dot1x authentication for Windows client using EAP-TLS and PEAP with MSCHAP-V2. The client has both a computer certificate and a user certificate loaded. However, we only want to use the computer certific...
We currently have ISE 3.0 Patch 6 with AD integration. We have machine and user auth setup using PEAP & MS-CHAPv2 and all is well. I would like to move to TEAP so I can chain machine and user auth in one to be able to enforce policies to deny access ...
