ISE 2.7 patch 3 installed and log4j hot patch is applied. If I install patch 6 , do I have to apply the log4j hot patch after that ?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
We are in a closed mode environment. I am running into an issue where we have specific devices that do not support DHCP. The device will not kick off 802.1x/MAB process because it will not initiate any traffic on the port. The temporary workaround we...
Hi, I have Cisco ISE version 3.0 Patch 2. The portal certificate is expiring in about 5 week time. I need to Generate a CSR to replace this certificate with a newer one. I have added in all the info except that the friendly name has 2022 in it and th...
Resolved! Limit ssh and http access IPv4 and IPv6
I have a 2901 dual stack router. I need to limit SSH and HTTP access to IPv4 and IPv6 ranges. At the moment, access is limited to list of IPv4 addresses but IPv6 is wide opened and I cant't find anything in the docs.Any help would be appreciated! ac...
Hey guys, Okay here is the scenario, We have One ISE node. One ASA5525x on which Anyconnect users land. We have given the users their username/password's.They authenticate via their username/password's & get connected via anyconnect. Then they get a ...
Resolved! Add multiple endpoints to a specific Cisco ISE Identity Group via API using Bulk CREATE call
Would anyone from Cisco be able to explain how to do the following? I tried to BULK create endpoints, but noticed this operation doesn't support groupId? So, I can create an endpoint using its MAC, description, MDM attributes, portalUser, profileId, ...
Hi,Authentication log is not visible on ACS since some days, which was working normal.As details of setup, two ACSs are clustered as Primary and Secondary and Secondary is set as LogCollector.Where do I need to check and do to crack this issue?
Resolved! RDP login on 802.1x using MAR
I'm facing the issue that when user try to login using RDP in a machine that is authenticated using MAR the user event is not send. If machine and user are in different vlan's or has ACL applied the RDP session not works. Anyone has this issue? How ...
Hi, I was trying to develop a guest access portal solution with wired mab. The switch and ise configured with standard configuration. The policy is simple, when the user enter correct username/password they will get network access and their mac addre...
I'm trying to setup Remote Access VPN on my FTDs. Connectivity seems to be working well, however, FTD can't seem to communicate with ISE properly for authentication. I know that connectivity between ISE and FTD is working because I can logon to FTD C...
Hi, I have an environment where roughly 800 client PC without LDAP/AD are integrated. The user just login into the PC using the local Windows credential. With this kind of environment, what can I achieve/benefit from if I were to integrate Cisco ISE ...
Hello Everyone,I have noticed that in my deployment there are way too many failed authentications versus successful ones. After doing some checks I noticed that they are mostly caused by docking stations. Following situation takes place. 1. Device is...
Hello, I have an ASA 5508-X running FTD code in a site to site vpn w/ FMC. Hosts on inside interface are able to auth via radius through VPN tunnel. However the FTD is unable to pass radius through the VPN. How can I configure the device to send r...
I'm trying to setup ISE-PIC 2.7 to replace the older Firepower User Agent software. I've followed the how-to install, and the PassiveID setup wizard. On the Providers pane I see my DCs all listed with an "UP" status (green check mark). But I've on...
Hello I don't have the time to test this myself, but has anyone got real world advice when replacing the Admin cert of a multi-node deployment? The customer is running ISE 2.4 in a 6 node deployment on SNS appliances. Currently the Admin cert i...
