Hello all, I am relatively new to Cisco ISE and all the possible conditions; I would like to know how to create the following condition: check if a device is member of an Azure AD group. The device will be Azure only (so no registration on-prem). I a...
I am having issues copying upgrade files to ISE nodes. Local disk management on the GUI is failing and is using the upgrade process and remote repository. Now trying to use WinSCP and I am getting an auth error. Tried both CLI and GUI passwords.Is th...
Hello, since the upgrade from 3.2 to 3.3 Patch 4, the "nas_port_id" and others cannot be returned via the ERS API. However, the information is available in the web interface. The configuration has not been changed. Is this maybe a bug?XML - 3.2 <sess...
Having issues upgrading from 3.2 to 3.3 patch 4. The Bundle has downloaded on the PAN but 5/6 have failed. Upgrade Bundle download failed: Be sure that all your software is working stable, check your system on UI page (Administration > System > Healt...
With ISE 3.2, I want to control command of juniper equipment using TACACS. Juniper uploaded vMX virtually. When I conducted the test, it was not controlled normally. When testing with existing Cisco equipment, each time you enter a command, you are a...
Hello Dears I faced an issue recently that WIFI is disconnects when I use secure client posture and as I checked automatically connect option so the connection disconnect and connect and secure client posture module every time scanning In the beginni...
Community,We are currently in a project where we are installing Cisco ISE with the help of a vendor.The vendor has/is charging us for a subscription called "Limelight". This subscription is, according to chat gpt, a subscription that is required whe...
Hi, I got many Cisco AP which are linked to 2 Cisco WLC.On each WLC, I configured a primary and a secondary RADIUS Server.RADIUS servers are Cisco ACS 5.2.0.26 (patch 10)Primary and secondary ACS configurations are synchronized.There are no problem b...
Hello,We are currently moving our Guest network (CWA) from WLC 5520 to the newer WLC 9800. While configuring Central Web Authentication (CWA) with Cisco ISE, we encountered an issue where client authentication fails, and the logs indicate that the se...
how to integrate cisco ISE with BigFix Patch management server. the goal is when a windows endpoint connects to ISE, ISE shd check bigfix patch server whether the endpoint is latest updated.If updated ISE posture permits the endpoint to network.
I did an export of all my devices because I need to change the description field for each device, the export has a simple passcode. When I update the "description" and save it, I next do the import however this is where it goes sideways. I select my ...
We're currently testing tacacs from ise to tacacs profileSet Default Privilege to 1Maximum Privilege set to 15. My personal opinion isIf you set it as above, the switch will successfully log in to the tacacs account and if enabled in the > state, you...
I do have a TAC open, but want to see if anyone has an idea while I'm waiting.So, we use a public COMODO cert for our portals. I just got the renewed cert and went to install it last weekend. With the new cert, all portals load with:This site can’t p...
I have currently been tasked with reviewing and improving the organisations NAC system (ISE), more specifically the classification policies. This involves reviewing and improving the current classification policies and aiming to reduce the number of ...
I would like to inform you whether it is possible to set a password lifetime policy for individual NW authentication user IDs in ISE. ------------------------------------------------------------------------------------------------ [Environment] Login...
