Network Access Control

Добрый день!Используется распределенная система ISE из 3х нод. Согласно руководства, cisco предлагает регистрировать лицензии 80:20. У нас система состоит из Primary PAN, Secondary PAN, Policy Service.Каждая нода находится на своей виртуальной машине...

We have an ISE deployment backed with RSA and Active Directory external identity providers, and we have acquired a new web solution which can make use of SAMLv2 for authentication. We wish to have this target ISE so that our identity providers can pr...

Hi,We are using Cisco ISE for NAC purpose. Recently we are observing Cisco any connect popup frequently.Please suggest how can we resolve this issue.

Hi, I have two customers, one on ISE 2.7 and the other one on ISE3.0 ISE 2.7 has Patch 6 installed which can FTP backups over to a 3rd party successfully. ISE 3.0 cannot FTP backups over to the same 3rd party. The control channel on tcp port 21 was s...

I was wondering why my firewall rules seem to be sleeping at times.  I have a simple rule that allows any zones to an IP printer in and it was not working at first but then started working out of the blue while running a ping to it.  Its a firepower ...

Hi, happy new year!It used to be the case that profile type was not readily available to use in authorization policies, but that is no longer the case. So what is the current use case for identity groups ? Just a higher order classification ? TIA,-Ca...

I'm running ISE 2.6 with patch 3,7. I just applied log4j patch. If I upgrading to ISE3.1, do I have to re-patch log4j again ?Thanks  

Hello guys,In a distributed environment is there a specific order in which the hot fix needs to be done? I'm having an 11 node setup, with 2 PAN. I assume the patch should start with the primary PAN, secondary PAN and then all the other PSN nodes. Is...

What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch exactly do to address log4j vulnerability?Does someone have documentation on it as the cisco provided one only contains the installation steps.

Hi, I have a scenario where multiple offices (different customers) are connecting with same data center via FortiGate firewall IPsec tunnel and SSL users (Forti client). We wanted to manually allow each Laptop/ Mobile device (non domain) connecting w...

HI all,Is there ways to print out multiple guests account info(username,password, duration, expired date) on a single A4 sheet, instead of one account per sheet?Regards,Ivan

Hi all,i looked two cisco web page describing web redirection ACL, however, seems they are total different? or am i missing something? or configuration of redirection  ACL total different on ISE and WLC?1)https://www.cisco.com/c/en/us/support/docs/se...

I am working at a customer that is using ISE local accounts as the identity source for device admin credentials (i.e. TACACS for switches, routers, FWs, etc.).  I have all the policies configured without an issue.  Now I am trying to develop a method...