Network Access Control

Hi, happy new year!It used to be the case that profile type was not readily available to use in authorization policies, but that is no longer the case. So what is the current use case for identity groups ? Just a higher order classification ? TIA,-Ca...

I'm running ISE 2.6 with patch 3,7. I just applied log4j patch. If I upgrading to ISE3.1, do I have to re-patch log4j again ?Thanks  

Hello guys,In a distributed environment is there a specific order in which the hot fix needs to be done? I'm having an 11 node setup, with 2 PAN. I assume the patch should start with the primary PAN, secondary PAN and then all the other PSN nodes. Is...

What does ise-apply-CSCwa47133_Ver_24_30_allpatches-SPA.tar patch exactly do to address log4j vulnerability?Does someone have documentation on it as the cisco provided one only contains the installation steps.

Hi, I have a scenario where multiple offices (different customers) are connecting with same data center via FortiGate firewall IPsec tunnel and SSL users (Forti client). We wanted to manually allow each Laptop/ Mobile device (non domain) connecting w...

HI all,Is there ways to print out multiple guests account info(username,password, duration, expired date) on a single A4 sheet, instead of one account per sheet?Regards,Ivan

Hi all,i looked two cisco web page describing web redirection ACL, however, seems they are total different? or am i missing something? or configuration of redirection  ACL total different on ISE and WLC?1)https://www.cisco.com/c/en/us/support/docs/se...

I am working at a customer that is using ISE local accounts as the identity source for device admin credentials (i.e. TACACS for switches, routers, FWs, etc.).  I have all the policies configured without an issue.  Now I am trying to develop a method...

I want to take a policy set from one ISE instance and place it on another.Exporting ISE policy sets is possible as per ISE admin guide:Export Authentication and Authorization Policy ConfigurationYou can export authentication and authorization policy ...

I'm tasting Dot1X / Posture / General RADIUS in my lab, and I want to have some clients with a private VLAN behind NAT, are there any considerations to keep in mind when I use ISE as the radius server?

Our Cisco ASA Devices (ASA 5515 Security Plus)have been flagged for CVE-2021-1585 bug with high priority. I could not yet find any sources to resolve this issue.Anyone here know how to fix? The CVE literally says no workaround for this.  Below is the...