Network Access Control

ISE REST API - modify InternalUser identityGroups

Hi, I need to modify InternalUser identityGroups field via REST API but looks Im missing something. If I send JSON e.g. { "InternalUser": { "id": "<uid>" "identityGroups": "<gid>,<gid>" } }I get 200 response { "UpdatedFiel...

Resolved! ISE 2.2 Script for phone number in Self-sponsored

Hi All, I AM NO DEVELOPER or CODER. I am trying to work around a script posted by Jason in Article below to get 2 things done. Users must input the number in format +614xxxxxxxx A placeholder in the phone number field: +61400123456 https://co...

SWT#sh cts environment-data . Always Stuck here

Hello freinds always stuck here , the same pac key between the SWT and Cisco ISE , what could be the issue and how to solve it SWT#sh cts environment-data SWT#sh cts environment-data CTS Environment Data====================Current state = ...

Resolved! Cisco ASA enable password with ISE TACACS+

Hello. I'm hoping to get some help with ASA enable password behaviour with ISE + AD. I was trying to google search but can't seem to find the answer. At the moment we use internal identity source for ASA TACACS+ access. For internal identity users, t...

Cisco ISE Endpoint Profile is wrong

Hi When Cisco ISE is doing the profiling it captures wrong endpoints such as it captured as Windows 7 but actually the PC is Windows 10 and they upgraded the PC from win7 to win10 last year but in Cisco ISE it's still showing as Window 7 - workstatio...

Resolved! ISE Wired Guest control

How do I implement Guest authentication for Wired devices using Cisco ISE. Requirement is to display Guest Portal for Non-AD joined devices.If the system is AD joined Access should be permitted. Only AD joined systems need to have access, if someone ...

CIsco ISE - Error when opening STS SAML Identity provider

Has anyone came across the following error when trying to upload a XML config to the STS profile: ‘Signing certificate validation failed, error: The IdP signing certificate expired. Reconfigure SAML Identity Provider with updated metadata’ Cisco ISE ...

Profiler feed not accessible in ISE

Hi to all, seen that same problem in some old posts (feed site down).Is this problem continuing?I have IS 2.4.0.357 and i fail to update the profler feed data. Ise fails during test with following message: Test result: Failure: FeedService test conn...

Resolved! ISE 2.6 install time on hardware?

Greetings, Due to a bug I have to reformat my ISE units and reinstall. We are going to ISE 2.6. We have SNS-3595's. I believe 2.3 only took about 30-45 min, but 2.6 is taking a lot longer. Anyone have an idea on time?

Resolved! How to restore the ISE backup to the new installation host.

Hi All,Let say if my 2 ISE primary and secondary on VM is failed but I have both configuration and operation backup.How can I restore the back up to the new installed host?Thank you in advance.SompongM

Resolved! Cisco ISE Multiuse certificate and standalone Certificate

Hi All, In our environment we are using 2 certificate on all 8 nodes (4 PSN and 2 ADM and 2 MNT)1: Admin, EAP Authentication, RADIUS DTLS2 : Portal Both licenses going to be expire in next t wo month and we are planning renew the certificate.Is it p...

My blue light is flashing on my ACS 5.4, and I can't get into web GUI

Below is what it says about the flashing blue light on the front of my Cisco ACS: Flashing Blue = When the system ID button is pushed, the Unit Identification LED flashes blue if the system is in either standby mode or system power is on. 1. How can ...

Resolved! Cisco ISE Posture stealth mode

Hi,at the ISE posture if i working with stealth mode - under profiles, can i still configure "remediation action" > "Text Message"?to notify the end-users that the endpoint not complied. there are two places to configure Stealth mode.1. at the profil...

Resolved! ISE Profiler - AD-Fetch-Host-Name

Hi, Please could someone advise if it's possible to use the AD-Fetch-Host-Name in a profiler policy and if so, how is this achieved? Many thanks

ISE MNT CoA API Tool

I was recently working on an ISE auto tool that would allow other admins the ability to leverage MNT APIs to issue a change of authorization (Reauth/terminate session) and get an updated session status. Essentially the idea was to allow IA/server te...

Network Access Control

Forum Posts

ISE REST API - modify InternalUser identityGroups

Resolved! ISE 2.2 Script for phone number in Self-sponsored

SWT#sh cts environment-data . Always Stuck here

Resolved! Cisco ASA enable password with ISE TACACS+

Cisco ISE Endpoint Profile is wrong

Resolved! ISE Wired Guest control

CIsco ISE - Error when opening STS SAML Identity provider

Profiler feed not accessible in ISE

Resolved! ISE 2.6 install time on hardware?

Resolved! How to restore the ISE backup to the new installation host.

Resolved! Cisco ISE Multiuse certificate and standalone Certificate

My blue light is flashing on my ACS 5.4, and I can't get into web GUI

Resolved! Cisco ISE Posture stealth mode

Resolved! ISE Profiler - AD-Fetch-Host-Name

ISE MNT CoA API Tool

Default Route SGT

PX Grid Connector and Service NOW

ISE Posture: secure client stops posture synchronization

Posture Script Condition–Fails to Connect When SHA-256 Fingerprint Add

Is it possible to use "PostureOS" attribute in ISE Profiling Policy

ISE Dot 1 X Authentication

Problem with PSN ISE node (error 5405 Radius session drop)

Update DNS in ISE really this hard/bad?

ExternalGroups in REST ID (Azure AD) in Authorization Policy

ISE TACACS log backup restore