Hi guys,I was wondering what time is the Policy > Policy Elements > Conditions > Time and Date based on, the UTC time of the ISE server or the switch/AP time?I'm testing this function and find that it seems it's based on the UTC time, not the current...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
We are trying to login to ASR 1006 router via NPS server authentication. But we are getting User rejected when did the test aaa command from router. From NPS server we are getting : Reason :The user's authentication attempts have exceeded the maxim...
Tengo un Cisco ISE 2.4 (Patch 10) y desde la CLI no muestra el comando "shell" tal como otros Cisco ISE de la empresa. Cisco ISE esta virtualizado sobre VMware ISE-2/admin# shell ^% invalid command detected at '^' marker. ISE-2/admin# s?show ssh ...
Hi, While integrating ISE with FMC i noticed that ISE is showing "Connected via XMPP" and it's not showing connected via pixgrid. Pixgrid service is running. ISE version is 2.4 with patch 10. I have a same issue in one more ISE cluster running on 2.2...
Hi Team,I would like to seek guidance with best practices and recommendations on how we can detect rogue AP connect to a switch on a wired 802.1x deployment.Regards,Sreng
Resolved! Cisco ISE Time-based authorization
Hi guys,How can i enforce different authorization policy at different time, like in the snapshot what attribute can i choose to accomplish the task below:When the user logged in before 8am, he/she received the Policy A. When the same user logged in a...
Resolved! ISE ERS SGT API 403 Error
Hey,I'm using the ERS API on my ISE 2.4.0.357. Using GET requests work properly, but every post request I've tried in the trustsec calls returns a 403 Error:ers/config/sgters/config/sgaclers/config/egressmatrixcell I've tried using POST on other part...
Hi, I want to create a repository is ISE and when I add the ftp server it asks for user/pass for this server. We dont have ftp user/pass for ftp. ANy idea how to resolve this ?
Hi all. Who has experience setting up admin access for opnsense via radius? Why can't I log in with the appropriate rights. Locally created group with full rights. An attribute with the name of the group is sent from the radius server (cisco ISE). Wh...
Resolved! Evaluation Device Admin License?
I'm running a home lab for ISE 2.7. I generated some temporary demo licenses through my Cisco account on the Product License Registration page and then imported them to ISE that look like this: I deleted my evaluation licenses without thinking.. and ...
Dear Community, I'm desingning an ISE deployment for a regional company that have a big amount of network devices which they want to administrate using TACACS+ protocol, they want HA by installing 2 servers in 2 different locations separated 200km, I...
Through probes using profiling how can we create Authorization policy set and assign the endpoints specific vlan, i have gone through various videos & documents i have understood the concept to what extent but not complete. Because there is a rul...
Hi , Recently we have connected our switch to a nac with dot1x .We have implemented all the best practice of cisco to connect the switch to our radius server .The clients authenticating successfully but as for the authorization side we are facing a ...
Resolved! ISE DNS & Syslog
My customer has reported ISE making a DNS query every time it sends a syslog. Doesn't seem desirable behavior, is this normal behavior or should I request they open a TAC case?It looks like ISE makes a DNS query for the syslog server prior to every ...
Dear all Does anyone face an issue with calling API to create Guest wireless accounts with Cisco ISE (we are running version 2.6 with latest patch#9).There are brilliant articles and pretty straightforward from Cisco and even here on community:https:...
