Network Access Control

Hello, Could someone please advise which version of ISE is not affected by the log4j vulnerability?What is the workaround if any ? Cheers, Gan 

Hello Team, During patch or hotfix installation, do we need to remove expired certificate. Actually one of the trusted root certificate is expired , not sure what is the use of that.. Also, pls let me know during hotfix upgrade , do we need to restar...

Hello, propably I have found something what should be reported to Cisco TAC, but I am not sure.In a file ACS-MigrationApplication-3.0.0-458.zip downloaded from Cisco site, there are 2 files:ACS-MigrationApplication-3.0.0-458.zip\migTool\bin\com\cisco...

Cisco Identity Services Engine Software hot patch for the log4j PSIRT bug - CSCwa47133. Apply this hot patch for 2.4,2.6,2.7 and 3.0 patches. Patch cannot installed. patch file is not in the correct format. 

Hi guys, My plain is to use wired 802.1x with EAP-TEAP and MSCHAPv2 for both user and computer auth from AD (chained).I will use "Automatically use my Windows logon name and password) under MSCHAPv2 config. Can somebody explain what "Remember my cred...

Can ISE only permit Remote VPN access from systems with permitted MAC address?VPN used is anyconnect and it's authentication via ISEPosturing like AV, OS etc are running successfully nowOne more condition needs to add into posture, User MAC address (...

My company has created a totally new CA and new laptops are now getting new certs and failing dot1x. "Failure Reason  12514 EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain" Is the fix as simple as installing...

I have a request on an ISE 3.0 setup to use AD authentication on wireless 802.1x (5520 WLC) to specicify specific ACLs but also only allow access from corporate machines so a user can't pull up their ipad and enter in their AD credentials. From my re...

Hello Community, I am in the process of integrating the Cisco ESA and Cisco ISE for admin authentication using RADIUS and I have used the below link which was straight forward and i was able make most of the features to work. https://www.cisco.com/c/...

I have a rather large problem that is causing grief with an ISE rollout.The workstations that we have are 99% running windows 7.We have administrators that want to be able to log in via remote desktop when the users aren't present (i.e. after a Wake ...

Hello all   I have an ISE Licensing CCNA-style question that I am trying to find the answer to. If you feel you're up to the challenge, please have a go ...   Question: The scenario is that the customer purchased ISE 2.x licenses a little while ago a...

Hi!After clients connected via AnyConnect and succesfully passed posture and CoA,information in Context Visibility - Endpoints about active endpoints is incorrect. Status - "disconnected", but it should be "Connected"Authorization policy - "Posture U...