Dear Community,I need some assistance with an ISE configuration for Netscaler logins. The Netscaler uses RBAC with command policies such as "superuser", "network" and "sysadmin". I am having a heck of a time trying to figure out how to configure the ...
I have noticed majority of a customers endpoints are showing as "misc" in the endpoints pie chart, see below: What defines this "misc" category and where is this definition configured? If I look at these misc devices, for example some canon printers ...
Hi to all, it seems that ISE has categorized around 70% of our network endpoints as type MISC and 32% out of this MISC type have been categorized as Unknown. In almost all of my switches i do not have dot1.x or MAB, just SNMP, and all of the switch...
After having several issues with the Admin node. I reimaged the node. Using the CIMC kvm, I loaded the ISO to map the drive and started the installation process. After about 4 hours I get Pane is dead. I have tried to reboot the server and the cold b...
Hello, An ASR 1002-X with IOS 17.03.03 was acquired.There are few C9300 on the same site with the same IOS version.There are some accounts set in tacacs server with privilege 7 (let say "priv7"). When I used "priv7" and login C9300 by ssh, the privil...
Hi Folks, I'm really new to ISE and have been trying to find some documentation on how to generate a report on when users last logged on to a network device with their Tacacs account. We have a policy to remove accounts that have been inactive for 6...
Hi, Trying to create an endpoint using the API while CSRF Check is enabled; everything works if that check is disabled. Using Python3, sending a GET request first to 'fetch' the token and then feeding that back into the headers for a POST request...
I am planning to restore a backup of Cisco ISE to a new VM. The backup is of a VM that is in HA mode. What will happen if I restore a backup from HA setup to a non HA VM? Does it stay as non HA VM?
Hi, I want to integrate the guest portal with ISE 3.0 and use the "HTTP SMS API" I just have the information about the API URL, hostname and port number.What information else do I need for integration and what is the API URL should contain in it? I c...
Hello Team,We have , Dual SSID BYOD set up – “XYZ-OPEN” open SSID for onboarding, and “ABC-Employee-Register” for BYOD Registered devices- Internal ISE CA for SCEP / BYOD Client Certificates- Certs issued with MAC-in-SAN, and users advised to disable...
Hi,I have two ISE VMs and am thinking of deploying them as a "split deployment". Which as per my understanding places the two nodes in an Active/Active HA pair. So basically I want PAN, PSN and MnT personas to be running on both nodes and should one...
FireEye version 34 has been out since November. The ISE posture updates are still only showing FireEye version 33 as the max. What is the normal turn around time for the posture updates to reflect a new version? Thanks
Hello ;actually, I'm setting up wireless authentication On cisco ISE 3.0 with 802.1X MS-CHAPv2 and MAB, but it's not working.my objective it's authenticating users based on the username/password and MAC for this I apply it to the authentication Poli...
Hi, is there a way to prepare some reporting for managed iPSK endpoints including the expiration date for example? I'd like to be able to check for the endpoints that will expire and prolong the time in advance. Can the iPSK manager somehow inform th...
I am going to upgrade virtual ISE in HA running all personas to 3.1, and in regard to this I have a few questions. I have done quite a bit of reading on the subject but would like to get the community's thoughts and recommendations on this topic.My ...
