Network Access Control

I have successfully configured wired MAB with redirect to an ISE Self-Registered Guest Portal. Along with the redirect ACL, I also send a 15 second reauthentication time out. This way the user transitions to full network access quickly after register...

Hello folks, greetings.Our customer has a pair of ISE 2.2 (PRI(PAN, PSN & MnT) and SEC(PAN, PSN & MnT)) running on old hardware and they have purchased a pair of new UCSs to migrate the deployment. Besides the hardware migration, they want to upgrade...

HI Experts.As it seems that we are still going to use ISE 2.2 for a while now. And the plan for an upgrade will take some time in future. But the browsers are not waiting for us and have already dropped the support for Adobe flash player.In such a sc...

Добрый день!Используется распределенная система ISE из 3х нод. Согласно руководства, cisco предлагает регистрировать лицензии 80:20. У нас система состоит из Primary PAN, Secondary PAN, Policy Service.Каждая нода находится на своей виртуальной машине...

We have an ISE deployment backed with RSA and Active Directory external identity providers, and we have acquired a new web solution which can make use of SAMLv2 for authentication. We wish to have this target ISE so that our identity providers can pr...

Hi,We are using Cisco ISE for NAC purpose. Recently we are observing Cisco any connect popup frequently.Please suggest how can we resolve this issue.

Hi, I have two customers, one on ISE 2.7 and the other one on ISE3.0 ISE 2.7 has Patch 6 installed which can FTP backups over to a 3rd party successfully. ISE 3.0 cannot FTP backups over to the same 3rd party. The control channel on tcp port 21 was s...

I was wondering why my firewall rules seem to be sleeping at times.  I have a simple rule that allows any zones to an IP printer in and it was not working at first but then started working out of the blue while running a ping to it.  Its a firepower ...

Hi, happy new year!It used to be the case that profile type was not readily available to use in authorization policies, but that is no longer the case. So what is the current use case for identity groups ? Just a higher order classification ? TIA,-Ca...

I'm running ISE 2.6 with patch 3,7. I just applied log4j patch. If I upgrading to ISE3.1, do I have to re-patch log4j again ?Thanks  

Hello guys,In a distributed environment is there a specific order in which the hot fix needs to be done? I'm having an 11 node setup, with 2 PAN. I assume the patch should start with the primary PAN, secondary PAN and then all the other PSN nodes. Is...

What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch exactly do to address log4j vulnerability?Does someone have documentation on it as the cisco provided one only contains the installation steps.

Hi, I have a scenario where multiple offices (different customers) are connecting with same data center via FortiGate firewall IPsec tunnel and SSL users (Forti client). We wanted to manually allow each Laptop/ Mobile device (non domain) connecting w...