Hi, I have a standalone ISE in test and a 4-node (PAN, Sec PAN and 2 PSN) in the live environment, all on 2.4, all for device admin only. I need to upgrade owing to EOL of 2.4 and plan to go to 3.0 but I have a Smart Licencing question. In test I hav...
In the document, it's mentioned that the MnT nodes receive their logs from PSNs and PANs in the deployment, what about the logs in the primary MnT? do they get replicated to the secondary MnT node as well? If I registered a new MnT node in the deploy...
Hello Guys, I am having a scenario and requests your help to get it clarified.Currently we have procured license (yet to install )according to 2.x version (Base , Apex & Plus of 1000 each + 2 Device admin) ,now we are planning to move to 3.0 in a SNS...
Android 10 is still not supported with the BYOD flow. I've tested up to 2.4 patch 10 with latest posture update. It is able to get to opening the application then the application says it can't find the session, have you logged into the portal. There...
Hi,We are trying to figure out if there is a way to monitor certificate valid period / expiry date via SNMP on ISE v2. From earlier posts this kind of monitoring seems to usually be done via SMTP or syslog. However, this solution is not preferable wi...
Hi, i need some help with this config, i already read several books, other posts and the administration guide but i'm not entirely sure how to enable the ISe to send alarm notifications, since there isn't any place where to put the sender email and p...
Good Day All Would anybody know which version I would've to patch or upgrade to on Cisco ISE that supports VMware tools version 11,301 or 11.1.5I can't seem to find any matrix, release notes on what version will be required.The Cisco ISE version that...
HelloI have a questions about the sponsor portal:1. Is it possible to use a script on the sponsor portal (Create Account for Known Gueste) to create the account name with the first letter of the first name and the entire last name (selected in ise) w...
Hi all, I am upgrading a Cisco ISE virtual cluster from 2.3 to 2.7, and need to change the Guest Operating System from 7.0 to 7.6 in VMware. When is the best time to make this change? Should I wait until the upgrade is complete, and then power down t...
When ISE dACL is applied correctly and is visible in the authenticated session: SW1-2960#show authentication sessions int g2/0/2 det Interface: GigabitEthernet2/0/2 MAC Address: 0050.5600.0141 IPv6 Address: Unknown ...
Hi ,Please for ISE 3.0 , is it necessary to have the Agents anyconnect apex to do posture as the ISE 2.X before or we can do the posture without agents? Thanks for your support. Best Regards.
Hello,Our customer wants to block connecting USB devices to their laptops using ISE. I know that there is a usb condition that we can use in posture policy. If I use that option, suppose a laptop connects to network without a USB mass storage device ...
Can someone figure out that I configure the LDAP server for ISE authentication of MAB, but the session doesn't hit on the authorization policy of LDAP group, I thought maybe is incorrect value in the * Group Map Attribute or * Group Object Class.. I'...
Hi Cisco Community, Is there anyway I can include posture to check OS version on Windows or MAC. Policy will be to check if the Windows is 7 or 10 for compliance and other version will be non-compliant? We are doing ISE Posture POC in our compan...
HiUpgrading the deployment, by building new Node and restoring the backup.My WLAN has all my PSNs in for resilience for Radius,The first PSN go to update is the first one in radius settings.Unfortunately devices are trying to auth before completing t...
