Is ISE agent required for PC when configuring monitor mode in switches?
Hi, Do I need to use agent in PC when configuring monitor mode in switches?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC!
We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! ISE Multiple deployment (3595 and 3615)
Hello Experts! I'm currently using three 3595 ISEs. I want to add another 3615 here as a PSN. Currently information ISE1 : PAN(Primary) + MNT(Secondary) + PSN ISE2 : PAN(Secondary) + MNT (Primary) + PSN ISE3 : PSN (Health-Check node) Is there p...
ISE 2.4 Authorization Profile setting an attribute in "Advanced Attribute Settings" does not work?
In an effort to avoid some looping MAB authentications, which I need to have do at least two authentications, I have created a custom endpoint boolean attribute that I assign "True" or "False" to and match against in multiple MAB Authorization Polici...
Client Provisioning policy not hitting when AD user group is mentioned in the condition
Hi, I am experiencing a weird problem with Aruba Wireless and Cisco ISE integration that if I write my client provisioning policy as Domain users AND Domain computers AND SSID Name then redirect to the client provisioning portal the client does not ...
Do I still need to be concerned about AnyConnect certificate warning (i.e. CSCut30037)?
Hi, In the past, I encountered a manifestation of the bug in the title, where AnyConnect would display a certificate warning due to the fact that ISE was using the system certificate for HTTPS on port TCP/8905 (part of the ISE posture evaluation). ...
ISE 2.4 How to get passiveID with domain name by API
HelloCould please someone suggest how to get session list with domain names by API?Our ISE is configured for getting passiveID from two DC . When I read session list with the requesthttps://ise/admin/API/mnt/Session/ActiveListI get only usernames and...
Resolved! Windows Os Architecture(32bit/64bit) profiling by Cisco ISE Problem.
Hi All.I want to classify my Clients as Win7 32bit and Win7 64 bit( I want to install some Apps based on os architectures via ISE Posture File remediation and I know this procedure) in Cisco ISE v2.4. Ho can I do that classification? already, I have ...
Resolved! ISE 2.6 failed TLS 1.1 handshake with Cisco Phone 802.1x
We are using Cisco 7962G and 7942G model IP Phones and attempting to authenticate them to our ISE 2.6 servers using 802.1x LSC certificates. My test phone successfully installed the LSC cert, CUCM CAPF cert was imported into ISE, phone set for 802.1x...
ISE 2.4 REPORTING ADVANCED FILTERS
I would like to create my own Tacacs authorization report. I have selected the "Device Administartyion / Tacacs Authorization Report" and I am using the "advanced filter" option to exclude some rows .It seems that I cannot use more than 5 filters. Ca...
Not able to set the passwords min-length in cisco switch 2960
Hi All,i m not able to set the passwords min-length in cisco switch 2960 Pls help
Cisco ISE authentication/authorization options with Identity PSK with Meraki Access Points
Hi Everyone, I just read that Meraki Access Points are in beta with Identity PSK: https://documentation.meraki.com/MR/Access_Control/IPSK_with_RADIUS_Authentication I am considering the option to use this feature in the future and use Cisco ISE we h...
Resolved! TACACS Failure
ISE 2.4 Patch 9I've successully used tacacs with no issues until all of a sudden I can to work one day and tacacs wouldn't work on any device I tried accessing and logs no longer appeared in operations>tacacs live logs. The only changes made prior to...
Resolved! ISE Integration with Symantec VIP for RA VPN
Hi,I appreciate any help if someone has tested the below scenario if it is doable or not Our customer got Firepower Appliances for Remote access VPN service using Anyconnect, and ISE as an Authentication server for remote access VPN users. The pla...
ISE Scaling Dedicated to Hybrid
Hi Community, Thanks for reading, hope you can help. We currently have an ISE deployment using virtual appliances in a dedicated node deployment (PAN, MnT, PSN, PxGrid and SXP) and currently considering pros and cons of going physical. With the intr...
Ise 2.4, Cisco WLC, iPhone Certificate based Authentication with Meraki MDM
Hello, We are using ISE in our network for RADIUS authentication for our wireless network currently. Machines connect through a wireless network that is pushed through GPO, this verifies the machine is in the correct OU and AD group for access, and a...
Recognize Your Peers
.jpg "VIP Expert"){kind=icon}
