Hey there, I'm on ISE version 3.0.0.458 and virtual WLC version 8.10.151.0. Here's how my authorization policy and the result is set up: The issue I'm having is I can only reach the Hotspot-Portal on my second attempt connecting to the network. ...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! ISE Configuration for Netscaler RBAC
Dear Community,I need some assistance with an ISE configuration for Netscaler logins. The Netscaler uses RBAC with command policies such as "superuser", "network" and "sysadmin". I am having a heck of a time trying to figure out how to configure the ...
I have noticed majority of a customers endpoints are showing as "misc" in the endpoints pie chart, see below: What defines this "misc" category and where is this definition configured? If I look at these misc devices, for example some canon printers ...
Hi to all, it seems that ISE has categorized around 70% of our network endpoints as type MISC and 32% out of this MISC type have been categorized as Unknown. In almost all of my switches i do not have dot1.x or MAB, just SNMP, and all of the switch...
Resolved! Pane is dead trying to to a reimages
After having several issues with the Admin node. I reimaged the node. Using the CIMC kvm, I loaded the ISO to map the drive and started the installation process. After about 4 hours I get Pane is dead. I have tried to reboot the server and the cold b...
Hello, An ASR 1002-X with IOS 17.03.03 was acquired.There are few C9300 on the same site with the same IOS version.There are some accounts set in tacacs server with privilege 7 (let say "priv7"). When I used "priv7" and login C9300 by ssh, the privil...
Resolved! ISE report - users last logon time
Hi Folks, I'm really new to ISE and have been trying to find some documentation on how to generate a report on when users last logged on to a network device with their Tacacs account. We have a policy to remove accounts that have been inactive for 6...
Resolved! X-CSRF-TOKEN handling
Hi, Trying to create an endpoint using the API while CSRF Check is enabled; everything works if that check is disabled. Using Python3, sending a GET request first to 'fetch' the token and then feeding that back into the headers for a POST request...
Resolved! Cisco ISE Restore from Backup
I am planning to restore a backup of Cisco ISE to a new VM. The backup is of a VM that is in HA mode. What will happen if I restore a backup from HA setup to a non HA VM? Does it stay as non HA VM?
Resolved! ISE 3.0 SMS GATEWAY INTEGRATION
Hi, I want to integrate the guest portal with ISE 3.0 and use the "HTTP SMS API" I just have the information about the API URL, hostname and port number.What information else do I need for integration and what is the API URL should contain in it? I c...
Hello Team,We have , Dual SSID BYOD set up – “XYZ-OPEN” open SSID for onboarding, and “ABC-Employee-Register” for BYOD Registered devices- Internal ISE CA for SCEP / BYOD Client Certificates- Certs issued with MAC-in-SAN, and users advised to disable...
Resolved! ISE split deployment question
Hi,I have two ISE VMs and am thinking of deploying them as a "split deployment". Which as per my understanding places the two nodes in an Active/Active HA pair. So basically I want PAN, PSN and MnT personas to be running on both nodes and should one...
Resolved! FireEye Version 34 Support
FireEye version 34 has been out since November. The ISE posture updates are still only showing FireEye version 33 as the max. What is the normal turn around time for the posture updates to reflect a new version? Thanks
Hello ;actually, I'm setting up wireless authentication On cisco ISE 3.0 with 802.1X MS-CHAPv2 and MAB, but it's not working.my objective it's authenticating users based on the username/password and MAC for this I apply it to the authentication Poli...
Resolved! iPSK Manager search/reporting feature
Hi, is there a way to prepare some reporting for managed iPSK endpoints including the expiration date for example? I'd like to be able to check for the endpoints that will expire and prolong the time in advance. Can the iPSK manager somehow inform th...
