Network Access Control

Hello Cisco ISE Experts, The customer is concerned about Switches with broken SXP or incomplete TrustSec configuration etc. What are the strategies for checking 500+ switches for health? The core is configured for SXP and distribution and edgefor inl...

I'm seeing a lot of mixed results but I'm trying to figure why my time on ISE is wrong. Its off by an hour and I currently have it set for EST. I found a bug online CSCwb01843 where I would think that the daylight savings time would adjust automatica...

We have Cisco ISE deployed in our enterprise environment for Authentication, Authorization and Accounting. But other than Cisco devices, none of the OEM devices like Juniper, HP, Huawei etc., accounting logs are not showing in ISE. However, Accountin...

Hi team, I have a quick question regarding the AD authentication and the way how ISE does authenticate users from AD. So far I see, it is based on AD groups. Is it a way to set up a policy/condition for a specific user in a group instead of allowing ...

Hi,I have an environment where my authenticator is an IOS router and my supplicant an IoT endpoint. I'm trying to do EAP-TLS to authenticate the endpoint.The authenticator will send the first EAP-Request to get the supplicant Identity with an EAP Id ...

Hello team,Have anyone of you experienced with upgrade the ISE Evaluation 2.7 to 3.1 ?I somehow facing a problem in the "Prepare to Upgrade" stage as the "Platform Support Check" states that it needs at least 12 CPU for the upgrade.I check on the eva...

Hi , Everyone The EoS/EoL information for R-ISE-VM-K9 is announced by Cisco.https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/eos-eol-notice-c51-741254.htmlAnd it will be EoL on February 28, 2022. But the document de...

Hello,I have dot1x enabled on all ports including those to which APs connected.My scheme is like this:clients -- Access Point -- Access Switch -- Access Switch -- Access Point -- Clientswhen a client moves from one AP to another, his mac address stay...

Good Day I have deployed 2 ISE Boxes at a customer Primary/Secondary nodes with Smart Licensing. The smart licensing works fine but after registering the secondary box I got this notification.  A Secondary administration node is added to deployment, ...

Hi all,I'm receiving this question from the customer. ArcSight is the SIEM they have to collect everything related to security.Log export in CEF format from ISEo   We would like to collect ISE logging on the same central syslog server mentioned above...

Hello All, Here is the requirement: Guests will be given access using Cisco ISE using the standard guest flow. However, customer would like to have visibility about which URLs, applications etc. are being accessed by a particular guest. Technically, ...