Network Access Control

All,I am trying to pull the configuration from the ISE DevNet Always On sandbox - https://devnetsandboxise.cisco.com - using the python script pasted below and I get the following error:    import paramikoimport timeimport tkinter as tkfrom tkinter i...

I believe I'm encountering an issue or a conflict between the non-configurable 5 minute ISE External MDM heartbeat interval and the equally non-configurable 4 minute Azure Public IP outbound idle timeout setting and I'm curious if anyone else has exp...

Hi Mates,We’re planning to roll out EAP‑TLS and I’d like to tap into your experience. What prior considerations, best practices, and potential issues or challenges — either before or after rollout — should we be aware of?Thanks in advance for sharing...

I'm not sure when it happened, but my clients cannot connect to the network anymore.PEAP with username / password works fine, but not EAP-TLS where certificates only are used.This goes for both wired and wireless clients.Initially, I thought that thi...

We are facing an issue with our Cisco ISE deployment (version 3.3). After enabling the External Admin Authentication Source from the GUI, we are no longer able to log in to the ISE GUI with the internal admin account or any newly created accounts. De...

Hi all, I want to share my findings about IBNS 2.0 with interface templates and the idea to use this feature to have the same default interface config on all switchports in the network (except several uplinks for sure). Main goal is: To allow not onl...

Is it possible to change the GUI and CLI Password Policy in Administration -> Admin Access using Ansible or API?I can't seem to find itWhat I want to do is change or disable the password lifetimeI tried to circumvent the whole thing by attempting to ...

Good morning technology people,Has anyone applied patch-7 on your 3.3 ISE environment?  I am almost 100% that this patch is NOT thoroughly tested by Cisco prior to releasing it.  I have to patch my 3.3 patch-6 system in about two weeks (due to securi...

Something I have learned this week the hard way:Don't install Cisco ISE patches using the web UI and login the same time with SSH for checking patching progress. It prevents the node from booting.Very odd that the upgrade procedure via web UI has all...

Hello there, we have a two-node deployment with our PAN on a SNS3615. Since the last upgrade to 3.4 P2 the licensing page shows this screen: As far is i'm informed. Version 3.4 P2 should be supported on the SNS3615 platform. I already renewed the re...

When monitoring the Cisco ISE with PRTG, I got some alerts about some paths that are not unavailable, as shown in the attached screen. What causes this, and how can it be resolved?I simply delete/pause the alert.

Hi everyone!  Good day and greetings!Does anyone here upgraded your ISE devices to 3.4 Patch 3? Did you guys encountered any issues and bugs?Regards

Hello Dears,Some Windows machines are being authenticated via MAB instead of 802.1X, even though all prerequisites appear to be in place. What could be the possible reasons for this behavior?Additionally, in some cases, the RADIUS logs show user auth...