Based on bug CSCvv49403 Cisco ISE 2.7 patch 3 is not vulnerable and port 8084 for BYOD Android is configured only for TLS 1.2. But after installing patch 4 or patch 5 Nessus scanner again show TLS 1.1. I have 2 questions:1. If will be fixed it in pat...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi,My ISE environment is hitting bug CSCvv41074, I am trying to install the patch but getting below error. Patch cannot be installed. Patch file is not in the correct format. The Hotpatch apply and rollback are available on https://software.cisco.com...
A few years ago, in the old Cisco ACSs, there were in the GUI, under the menu "Monitoring & Reports> Troubleshooting> Connectivity Tests", the ping, traceroute and nslookup utilities... Now, on ISE 2.6, I only found the ping, but in the CIMC interfac...
I have a rather large problem that is causing grief with an ISE rollout.The workstations that we have are 99% running windows 7.We have administrators that want to be able to log in via remote desktop when the users aren't present (i.e. after a Wake ...
Gents, Certificate based authentication works well for computers and then users (after computer auth). However, the first time the user authenticates, W10 ask them to choose the certificate for user authentication. Please let me know how the computer...
Hi Team, currently we have ISE running 2.7 version with Anyconnect Posturing enabled which is working fine. now we want to upgrade old Anyconnect software and posture compliance module via ISE. 1- my question is how can we upgrade it via ISE or what ...
DetailCisco ISE 2.7.0.356In the Active Endpoint of the main operation screen, client terminals connected to the wired LAN are counted immediately, but wireless devices are not counted.Does anyone else have the same problem?
Hi, We are not getting 'NOTICE' severity level events in External Syslog server from Cisco ISE. We understand it should be able if we select 'INFO' level while defining the targets since there is no option to select 'NOTICE'. Since we see some logs f...
Resolved! Progress being saved online?
I do my activities sometimes offline. Does the progress being saved online or is it being saved on the file only? Thanks!
I have a guest portal for wireless clients and in the authorization policy I use the condition of "Guest Flow", and in the WLC I have disabled the "Session Timeout" of the WLAN.The documentation indicates that with this configuration the guests will ...
Resolved! ISE SMS format
Hi,I am having some trouble getting line breaks working in SMS messages pushed from a self-registered guest portal. Testing with the default self-register portal, the format is working fine:Default config: However, if I edit this config, the SMS is ...
Resolved! Cisco ISE External Identity Sources
Hello, I am in the process of adding Active Directory in ISE and for the life of me, every time i click the +ADD option, nothing happens. It is not grayed out. I can also click advanced tools, or move around the GUI but not add. I rebooted ISE, tried...
I have tried to find an answer to my issue but have failed to do so.Originally I had Anyconnect 4.9.06037 installed and working fine on my system.I am setting up ISE Posture for a client for the first time. This is for an FTD deployment but I don't t...
Hi everyone, We have a wired dot1x authentication problem here.I'm sure the NPS server is ok,because other clients are using it.We using a switch C2960L running version 15.2(5c)E Here are my conf:interface GigabitEthernet0/13description dot1x-failswi...
Hi Experts,Is there anyway that the guest access can be configured using a dual factor authentication?Or MAB based authentication using dual factor authentication?Is dual factor authentication possible using the base licenses?Any pointers appreciated...
