Welcome to the Cisco Community Ask Me Anything EventWe invite you to participate in our upcoming Ask Me Anything (AMA) conversation. Please submit your questions from Thursday, April 23, 2026, through Thursday, May 7, 2026. Our experts Miguel Martine...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
I have Gig through network in my environment and I attempt to install a fresh ISE 3.1 on a SNS-3615 but the installation is taking a LONG time. I am getting about 10Mbits/sec on a 1Gig network. The CIMC and my windows server 2016 server is on the s...
I would like to believe I configured everything correctly with the switches, AAA authentication and groups configured as well as the radius server settings. On the radius server the client (my switch) has been configured. Not entirely sure if I'm mis...
Hi Team,I would like to seek some help on an issue when AD users change their password, ISE does not get synced and therefore, users are not able to log in to Windows.Some users are able to log in to Windows but after a while, an AD credential input ...
Hi guys,I was wondering what time is the Policy > Policy Elements > Conditions > Time and Date based on, the UTC time of the ISE server or the switch/AP time?I'm testing this function and find that it seems it's based on the UTC time, not the current...
We are trying to login to ASR 1006 router via NPS server authentication. But we are getting User rejected when did the test aaa command from router. From NPS server we are getting : Reason :The user's authentication attempts have exceeded the maxim...
Tengo un Cisco ISE 2.4 (Patch 10) y desde la CLI no muestra el comando "shell" tal como otros Cisco ISE de la empresa. Cisco ISE esta virtualizado sobre VMware ISE-2/admin# shell ^% invalid command detected at '^' marker. ISE-2/admin# s?show ssh ...
Hi, While integrating ISE with FMC i noticed that ISE is showing "Connected via XMPP" and it's not showing connected via pixgrid. Pixgrid service is running. ISE version is 2.4 with patch 10. I have a same issue in one more ISE cluster running on 2.2...
Hi Team,I would like to seek guidance with best practices and recommendations on how we can detect rogue AP connect to a switch on a wired 802.1x deployment.Regards,Sreng
Resolved! Cisco ISE Time-based authorization
Hi guys,How can i enforce different authorization policy at different time, like in the snapshot what attribute can i choose to accomplish the task below:When the user logged in before 8am, he/she received the Policy A. When the same user logged in a...
Resolved! ISE ERS SGT API 403 Error
Hey,I'm using the ERS API on my ISE 2.4.0.357. Using GET requests work properly, but every post request I've tried in the trustsec calls returns a 403 Error:ers/config/sgters/config/sgaclers/config/egressmatrixcell I've tried using POST on other part...
Hi, I want to create a repository is ISE and when I add the ftp server it asks for user/pass for this server. We dont have ftp user/pass for ftp. ANy idea how to resolve this ?
Hi all. Who has experience setting up admin access for opnsense via radius? Why can't I log in with the appropriate rights. Locally created group with full rights. An attribute with the name of the group is sent from the radius server (cisco ISE). Wh...
Resolved! Evaluation Device Admin License?
I'm running a home lab for ISE 2.7. I generated some temporary demo licenses through my Cisco account on the Product License Registration page and then imported them to ISE that look like this: I deleted my evaluation licenses without thinking.. and...
Dear Community, I'm desingning an ISE deployment for a regional company that have a big amount of network devices which they want to administrate using TACACS+ protocol, they want HA by installing 2 servers in 2 different locations separated 200km, I...
Through probes using profiling how can we create Authorization policy set and assign the endpoints specific vlan, i have gone through various videos & documents i have understood the concept to what extent but not complete. Because there is a rul...
