Hi all, I'm planning on upgrading four ISE servers in a cluster from 2.4 to 2.7 that are running on VMs. Is it possible to upgrade it by removing a node and then installing a new one with the new version to then add one by one replacing the ones with...
Hi,I have a VPN firewall (ASA) sending syslog to ISE (2.7 patch 6). ISE has Syslog Provider configured for passive identity feature. ISE is also configured with AD as PID provider using WMI. The VPN user testuser1 is an AD user account. When a user (...
Hello, I'm working on a project where I need to authenticate and authorize users in my python application.I want to use Cisco ISE as my Radius server, but I can't get it to work. Does anyone know a good tutorial or know if its even possible. Using L...
how can i configure the extra interfaces for ISE?
Hi,I have a question regarding SXP mappings expiration in ISE.From the Trustsec Workcenter in ISE, there is the "all SXP mappings" view where ISE shows the IP / SGT mappings I have also an ASA which have a SXP connections with ISE to get all the mapp...
How I can get the instance number of ISE VM?
Hi All, Looking at basic SNMP polling for ISE, is this possible or do I need to actually send traps to a designated host?
Endpoint status in visibility remains "connected" although its already disconnected on switch side... what could cause for such behavior?
Hi Experts.Recently we have integrated passive ID with ISE 2.7.Also integrated it with FMC using pxGrid.Now what we are seeing is that the logins for the users are not reflected instantaneously in live logs.And when a user logs in to multiple machine...
Hello, dear community members.I am dealing with the new Root CA in the Enterprise Infrastructure.Both, old Root CA and new Root CA issue certificates to ISE EAP-TLS use.I can't use the new certificate for ISE EAP-TLS issued by the new Root CA because...
I have disabled SHA 1 ciphers on ISE (Administration > System > Settings > Security settings), If SNMP settings for a network device are configured, will it have an impact if it uses SHA as an Auth Protocol? I don't understand what SNMP settings are ...
We are upgrading ISE - from Version 2.2 (Hardware - SNS-3495-K9) to Version 2.7 (New hardware - SNS-3695-K9) using the Backup /Restore Upgrade Method. I have a query regarding the Export and Import of certificates.. The Export process from the OLD V...
Hello everyone,I would like to use TACACS command authorization to allow our help desk personal to run specific show commands so that they are better able to support the network without having to always contact the network team with basic inquiries.C...
Team,I am looking for some ideas on creating profiles for non-standard devices like Cameras on the Cisco ISE for NAC.These devices are not being detected as a standard vendor for OUI or any other parameters. One option is to add manual MAC addresses ...
We are running a self-registration gues WLAN with sponsor approval. After a guest user has requested an account for this WLAN, ISE sends an approval request email to the sponsor. In this Email, the link which will trigger the approval is generated by...
