Network Access Control

Resolved! dot1x Monitor mode and ISE report

Hi - I have a question around wired dot1x monitor mode and ISE. If I was to enable monitor mode on a switch, is it possible to generate a report in ISE (if yes, how?) that tells me which users/clients have failed the dot1x authentication? This is to ...

Resolved! acces right ISE 3.0

Hello, I have an ISE 3.0 and I would like to give access to "Import endpoints from CSV file" in Identities/endpoint to ISE administrators, I already gave access to logs and import menu, but when I click to test it tells me I don't have the rights. Th...

Resolved! Cisco ISE 3.0 patch-3 is making outbound https to unknown sites

My Cisco ISE 3.0 patch 3 on SNS-3655 is making outbound https to the following sites: 173.37.145.8 --> tools2.cisco.com34.216.127.109 --> ec2-34-216-127-109.us-west-2.compute.amazonaws.com.35.83.205.101 --> ec2-35-83-205-101.us-west-2.compute.amazona...

Resolved! IPV6 ACL permit but not working on C892FSP-K9???

Hi,I have set up filter for the inbound interface on the wan part.I permit www and 443 traffic from any to a specific host (2A01:XXXX:XXXX:C884:8000::1).I get the following error on the browser:<html><head><title>Service Unavailable</title></head> <b...

Resolved! ISE Certificates - Roaming Between Nodes

What is the best method for deploying EAP certificates within a multi-node deployment where users will roam between sites? Each site has an ISE PSN and the Admin and MGMT nodes are in a DC.The root CA of the certs that are presented to clients during...

Resolved! ISE Backup is stalled

Hello, I have ISE version 2.2.0.470 with a hung backup.From the CLI how can I cancel the backup job, using the least intrusive method possible? I want to avoid a reload if possible. Configuration backup status%% ----------------------------% backup ...

Resolved! AnyConnect does not recognize disk encryption

Dear community,I am trying to connect to a VPN using AnyConnect but the System Scan keeps failing with "The disk is not encrypted" error message, even though my hard drive is encrypted with Bitlocker. Actually, Bitlocker is displayed in the Security ...

Resolved! Rebooting multiple ISE nodes - what's the quickest yet safe sequence?

I had to reboot our 2 ISE VMs recently. TAC has said to just be sure I leave one node up so there are still services available. They always say this. I never get a really clear answer to my question.I have been rebooting the secondary node, making su...

Resolved! Dynamic Variable Scalability

I have a large customer looking to leverage dynamic variables on their endpoints to lock certain endpoints into a particular department (serviced by a set of IDF), certain switches and potentially a certain port on a switch. I can do all this easily...

Resolved! MAC authentication and username/password

Hi ,I would like to ask about ISE.can i do MAC authentication and username password or certification together in ISE ?I mean our device firstly use MAC authentication and MAC is correct check the username and password or certificate. is it possible ?...

Resolved! ACS, AD domains and a strange error

Hello.We have : ACS 5.8.1.4< three domain (Win2012) primary oneil.local subdomain vuko.oneil.local/ booka.oneil.localAll users connect via VPN without problems from these domains.W...

Resolved! Configuring Multi-auth host mode for IP Phones and APs / switches

Is it possible to authenticate APs / small switches and also Voice on the same port as clients? as far as I know:* APs and switches : authentication host-mode multi-host* IP Phone + PC on the same port: authentication host-mode multi-auth. Is it poss...

Resolved! Windows 10 Native supp request identity fail

Hi,I am using Native supplicant in Win10. I use EAP-TLS for machine and user authentication. The problem is that sometimes when I log in the authentication ends up in MAB. When I do clear auth sess on the switch - no change. I did some wireshark and ...

Resolved! ise and switch authentication and privilege level

Hi Guys,I'm working on an eval on vmware. I have got everything working for wlan authentication and I’m working on shell authentication for switches. On the ACS you have the possibility to give the user privilege level on the switch. You can do this ...

Resolved! Is there any way to deny the access if a windows services is enabled on Cisco ISE?

Hello Team, I need to know if exist any way to deny the access to the network/VPN when a windows services is enabled? I mean I need to deny the access to all users who have the printer spooler enabled on Cisco ISE. Thanks!

Network Access Control

Forum Posts

Resolved! dot1x Monitor mode and ISE report

Resolved! acces right ISE 3.0

Resolved! Cisco ISE 3.0 patch-3 is making outbound https to unknown sites

Resolved! IPV6 ACL permit but not working on C892FSP-K9???

Resolved! ISE Certificates - Roaming Between Nodes

Resolved! ISE Backup is stalled

Resolved! AnyConnect does not recognize disk encryption

Resolved! Rebooting multiple ISE nodes - what's the quickest yet safe sequence?

Resolved! Dynamic Variable Scalability

Resolved! MAC authentication and username/password

Resolved! ACS, AD domains and a strange error

Resolved! Configuring Multi-auth host mode for IP Phones and APs / switches

Resolved! Windows 10 Native supp request identity fail

Resolved! ise and switch authentication and privilege level

Resolved! Is there any way to deny the access if a windows services is enabled on Cisco ISE?

ciaco ISE 2.7 to 3.1 but it's using internal CA for authentication

Best way to upgrade Compliance Module without killing ISE

CSCwn25013 - ISE 3.2 P7: Patch install breaks db-reset

Cisco ISE, no SXP-bindings from session

Occasional delay in assigning ISE SGTs to client traffic on NAD

Cisco ISE Authentication with Subject-CN?

Cisco ISE 3.4p3 bug that replaces hidden values with asterisks?

ISE Integration with Entra-joined Devices/Users

CIsco ISE 802.1x EAP-TLS authentication with Entra ID

Cisco ISE License Assignment