Cisco Identity Services Engine Software hot patch for the log4j PSIRT bug - CSCwa47133. Apply this hot patch for 2.4,2.6,2.7 and 3.0 patches. Patch cannot installed. patch file is not in the correct format.
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hello; We have a ASA 5515 as VPN Portal, and a ISE 2.7 for allowing the Domain Users to connect with Posturing to our Network.So far so good, everything works fine.Now i want to upgrade the annyconnect Client and get this Error when i try to login to...
Hi guys, My plain is to use wired 802.1x with EAP-TEAP and MSCHAPv2 for both user and computer auth from AD (chained).I will use "Automatically use my Windows logon name and password) under MSCHAPv2 config. Can somebody explain what "Remember my cred...
Resolved! ISE Posture - Client MAC address
Can ISE only permit Remote VPN access from systems with permitted MAC address?VPN used is anyconnect and it's authentication via ISEPosturing like AV, OS etc are running successfully nowOne more condition needs to add into posture, User MAC address (...
Resolved! 2 CAs on same ISE cluster for EAP/dot1x
My company has created a totally new CA and new laptops are now getting new certs and failing dot1x. "Failure Reason 12514 EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain" Is the fix as simple as installing...
Resolved! Machine and User Auth wireless?
I have a request on an ISE 3.0 setup to use AD authentication on wireless 802.1x (5520 WLC) to specicify specific ACLs but also only allow access from corporate machines so a user can't pull up their ipad and enter in their AD credentials. From my re...
Hello Community, I am in the process of integrating the Cisco ESA and Cisco ISE for admin authentication using RADIUS and I have used the below link which was straight forward and i was able make most of the features to work. https://www.cisco.com/c/...
ISE VM Evaluation (I'm doing this on testbed before I implement it on production for customer)Version 3.0 patch 4 with log4j hotfix. Problem Description:Whenever I use the parent group of the network device the policy does not seem to catch it. Netwo...
I have a rather large problem that is causing grief with an ISE rollout.The workstations that we have are 99% running windows 7.We have administrators that want to be able to log in via remote desktop when the users aren't present (i.e. after a Wake ...
Resolved! ISE 3.x Licensing CCNA Question
Hello all I have an ISE Licensing CCNA-style question that I am trying to find the answer to. If you feel you're up to the challenge, please have a go ... Question: The scenario is that the customer purchased ISE 2.x licenses a little while ago a...
Hello, As we have dead disk several time without been advised by any ISE logs.I want to know if there a way to get disk status (running/failed/removed) by SNMP from CIMC I guess as this information seems to not be forwarded to the ISE application la...
Hi!After clients connected via AnyConnect and succesfully passed posture and CoA,information in Context Visibility - Endpoints about active endpoints is incorrect. Status - "disconnected", but it should be "Connected"Authorization policy - "Posture U...
Resolved! ISE 2.6.0.156 patch for Log4J
How long is the process for applying to patch for Log4J?As I am looking to upgrade anyway but this will take several hours as there are two nodes. Is the patch a faster process so I can deal with Log4J first and schedule the upgrade to 3.0 after the ...
Resolved! Log4j bug for ISE v2.1
I can see patch for this bug for ISE 2.4 to 3.1 (Log4j) but not for ISE versions 2.1.0, How can I patch it? or it's mandatory to upgrade to 2.4 before?Thanks.Log4j
My TACACS is working fine but it has a single issue that I'm trying to understand, how can I get the switch to log into exec mode directly after successfully login in to enable mode? My AAA config is like this: aaa authentication login default group ...
