We have smart licensed our cisco ise box. (ISE-2.4 release SNS3595 Medium 1200 GBHD 64 GB Ram 16 processor) But it is showing out of compliance for VM large and Release Entitlement for VM Medium and VM small. Please help me understanding this. Is any...
Hey!I am planning to add multiple entries to my ISE (Tacacs) configuration, using generated template.Work Center --> Network Devices --> Import (using generated template).Will ISE replace exiting objects with ones in the template file, or add ones fr...
Hi, Have set up a CWA Portal for a guest ssid. The client will only redirect to the Portal on the ISE server if I put the IP address in and not the FQDN. I was under the impression it was the wifi client that sends the DNS request, and the client LAN...
Hi, How can TC-NAC be configured to scan AnyConnect Endpoints as they join VPN? I'm not getting an internal IP address for the endpoint in the RADIUS Live Logs (only the public IP). I've got TC-NAC scans working on wireless endpoints as they join t...
Hi All, I am currently lab testing TrustSec and I have a question regarding the use and configuration of SGACLs. For basic testing I have an SGT named 'Monitoring_Servers' and an SGT named 'Clients'. I want to configured an SGACL and Policy to allow ...
HiThese days... I was thinking if there was any way to desencryp the user and password tunnel eap.I was looking at this article. I would like to know your opinions. https://depthsecurity.com/blog/when-802-1x-peap-eap-ttls-is-worse-than-no-wireless-se...
Hi All, I need to configure a purging rule in ISE to remove any unknown or profiled endpoints that have been inactive for 30+ days which seems to be simple enough. What I want to ensure is that endpoints that are statically assigned to identity group...
Is there a trial version of cisco ISE? I need to upgrade my knowledge from ACS to ISE and I am finding it difficult to find source material.ThanksMark
Hello everyone I tell you that I recently had a problem with my cisco ise 2.7 patch 3, when I try to see the configuration of the identity source sequence it shows "data not avaliable", however I can identity source sequence and I can assign them wh...
So on the ISE CLI I found the option to enable TACACS+:ise/admin(config)# aaa authentication tacacs+ server ?<WORD> Server ip or hostname (Max Size - 31)ise/admin(config)# aaa authentication tacacs+ server Can I use TACACS+ for CLI login? I didn't fi...
Hi all, I have SDA Fabric and all config pushed by DNA Center. I see DNA Center push config relate to AAA (class-map, policy-map, template, assign template to interface) I want disable 802.1x only wired connection. Has anyone done this yet? p/s: i ...
Hello, I'm working on an integration via MnT API calls where I can provide to end-users the status of their endpoints (if they are getting blocked or allowed by ISE) as well as some location (port and switch). I have a distributed deployment running ...
1/. Does Cisco ISE comply with ISO/PCI DSS/etc? If yes, can you share which point? 2/. Does Cisco ISE have Reports for HIPPA/TRM/ISO/PCI DSS/PDR compliance format? 3/. How does Cisco ISE provide protection for Data at Rest and Data in Motion? Please...
Hello, I usually use ISE in Japanese and I tried to import Guest/ Network Access Users from CSV, but garbled characters were displayed. I can enter the Japanese characters in GUI and then these are enrolled corrctly. However I need to configure users...
Overview:A customer has 2 sets of Standalone ISE that is in HA Primary and Secondary.Currently in ProductionModel: SNS-3655-K9Software Version: 2.7 Patch 2Older ModelModel: SNS-3595-K9Software Version: 2.7 Patch 1 Objective:1. Customer would like to ...
