Network Access Control

Team,I have a problem, I want to connect a PC and a Polycom phone but the PC does not authenticate to ISE.By having the PC connected to the phone, the ISE recognizes it by MAB and it should be by DOT1X.When doing tests, I connect the PC directly to t...

Hello everyone,I am trying to configure downloadable ACL through a 3rd party radius server (MS NPS).At this point I understood this was done through the cisco-av-pair attribute.However I have found little resources as to the configuration i need to d...

Recently we had deployed ISE server for authentication and Authorization purpose and there was many requirement by the client which was fulfilled, now the last requirement by them is to do multiple user login on same machine, due to these requirement...

Question: If a VoIP phone connects to a switch that has 'authenticaion open' command on the interface, and the switchport access vlan 10 is set, as well as, the switchport voice vlan 20. Would the phone still have access to the voice vlan? The phone ...

Hi We have ISE 2.7 distributed design deployed and working fine with PSN split in two time zones: PAN x 2MnT x 2PSN x 8 I want to split the current network and want to take out 4 PSN from this setup and want to administer these four PSN by deploying ...

Hi, Recently I have patched my Cisco ISE 3 to 3.0.548 and I want to know is this patch supports PLR Licensing ? I would really appreciated if someone can guide me about this.

Hi Team,I understand that we have a list of ecosystem partner for pxGrid and PAN is not listed there. Do we have any case study or any partner for reference who has done the ISE integration with PAN for Rapid Threat Containment…or any document which ...

Hi to All, I think that a lot of discussion has been around this "No Authentications in the last 15 minutes" and as i noticed int he bug reporting tool this would be fixed in ISE 2.4(357) , however i have this version and the message is still active....

Hi, I am running ISE 2.4 and Firepower FTD 6.4 with the ANC function to quarantine endpoints and that has been working fine, but we recently changed ISE servers and run into problems. On the Firepower side I have created new certificates and configur...

Hello, Sorry if this has been asked or if l missed some basics.Is there a way to create TACACS authorization policy based on the specific username(s) with LDAP, not just based on the group? Thanks,myky 

Hey,I've seen it documented that the SGACL size cannot exceed 6KB - "Dynamic SGACL download size is limited to 6 KB" (https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/xe-16-7/sec-usr-cts-xe-16-7-book/sec-cts-sgacl.pdf).In o...

HiWe are planning to deploy Cisco ISE with 3 node deployment (Primary PAN, Secondary PAN and monitoring PSN).  Please help in understanding, what will be the impact, if single monitoring PSN goes down? RegardsAshish Shah