Dear community, We decided to go with AnyConnect installation via GPO. I have identified the AnyConnect web client and Posture Compliance module, as pieces that need to be installed via GPO. Am looking for the AnyConnect Posture Profile, and am ass...
Hi, can you help me with this? I need to create a script on python to export all endpoint and attributes from cisco ise (2.6), like the export from gui (context visibility - endpoints,. export all). Thanks. Gustavo.
Hi, Currently implementing dynamic VLAN assignment for both our 802.1X clients & profiled devices via MAB. The condition matches the device in ISE with the full summary report showing "authentication succeeded" , authorization profile selected, Radiu...
Dear community, How do I install the ISE AnyConnect Posture module and its components to hosts via GPO?! Is there a guide on how to do this? Thank you,Laura
Dear community, While trying to configure Cisco ISE Posture via AnyConnect, I noted that AnyConnect is quarantined from the Antivirus Software which is installed in the host machine. Do you have any idea why this is the case, as I downloaded the pac...
For RADIUS, deadtime criteria is used to mark a RADIUS server as dead / alive, what about TACACS? network device surely doesn’t continuously ping the servers, so i don't think ICMP is used to check. All the documents I have for RADIUS, not TACACS, an...
Dear community, As part of the ISE Posture with AnyConnect, I have imported the Root certificate to all domain hosts via GPO. However, am still getting a Certificate error of untrusted server, when AnyConnect tries to talk to ISE appliance during po...
Dear community, I have detached and made this question alone, as am still stugling with the following issue: "Security Warning: Untrusted Server Certificate!" AnyConnect cannot verify server: ise1"Certificate does not match the server name. Certifi...
Hi, I'm using VIOS L2 version -Version 15.2(4.0.55)E. On this, DOT1X or any kind of authentication is not even starting on the switch. I've attached the full switch config, and I'm pretty it is correct. Of course the interface is up and the switch c...
Hi So i have a switch it is 100% 802.1X / MAB config. I have 4 Ports working. description 802.1Xswitchport access vlan 32switchport mode accessswitchport voice vlan 14authentication control-direction inauthentication host-mode multi-authauthenticati...
Hi, I'm in the process to update to ISE 2.7 P5 (release date Sep 21th), but today (Oct 19th) ISE 2.7 P6 was released (so far ISE 2.7 Release Notes haven't been updated). Does anyone know anything about 2.7 P5 that I should be concerned about or the r...
After I integrated ISE & Stealthwatch . I can't see any users on Stealthwatch>Monitor>USERS ,also I can't apply ANC to the host.I follow the guidance on this posthttps://community.cisco.com/t5/security-documents/deploying-cisco-stealthwatch-7-x-with-...
I have the following three expired certficates on Cisco ISE.Default self-signed server certificate (expired on 06 Nov 2019)DST Root CA X3 Certificate Authority (expired on 30 Sep 2021)VeriSign Class 3 Secure Server CA - G3 (expired on 08 Feb 2020)Sin...
Hello i have configure tacacs on switch cisco and cisco ise my problem I can not access with user create on ise only with local user and no log display in ISE i verife my shared key /address is ok config on Switchaaa new-modelaaa group server taca...
Hi AllWe currently have a two node deployment running 2.3 on SNS-34XX appliances, we're moving to virtual appliances running 2.7.My plan is as follows:1. Setup one VM with a temporary address and restore a config backup to it (completed)2. Do some te...
