Welcome to the Cisco Community Ask Me Anything conversation. Submit your questions from Thursday, February 26, 2026 through Thursday, March 12, 2026. Our experts Miguel Angel Martinez Sanchez, Mack Williams Jr., Ayodeji Oluwase, Homero Ruiz, and Tim...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Having a problem with the Cisco ISE openAPI. I want to filter endpoints based on them not belonging to an endpoint identity group(s). However, whilst the following request using the filter "EQ" works GET /api/v1/endpoint?page=1&size=1000&filter=group...
\How to set up the posture policy to do check only for remote vpn(Cisco secure client) users, no posture check for users connected via wired or wifi? Thanks
I have a question about ise license. I want to install ise 3.0 or higher version on vm. Does the basic license apply from 3.0 or higher? Or is it limited to 90 days?license
Hi,Is it possible to integrate Kandji MDM with Cisco ISE?I have been looking for guides but so far not found any.Our company uses Kandji MDM for the management of Apple devices and we want to integrate it with ISE to enforce NAC. I have just finished...
Hi All,I would like to know if it’s possible to create different posture policies for wired and wireless endpoints. For example, since wireless users typically use laptops and are roaming clients, the Cisco Umbrella service must be checked. However, ...
Hi, We have a two-mode ISE 2.7 Patch6 deployed.Recently we rolled out 802.1X to all our customers Windows10 laptops and desktops with EAP-TLS. The majority (98%) of the users can login to the network without any issues. Some users get this error mess...
Hi, I've configured a Cat9300 running Gibraltar 16.12.3 to retrieve its CTS PAC but it is not working. This is my current config: 9300-access#sh run | sec radiusaaa group server radius ise-pacserver name ise-pacaaa authentication dot1x default group ...
Hello Cisco ISE lover, Currently, I have an inquiry refer to posture process. As we have Pending and Complaint status for DOT1x (Supplicant) wired connection. Base on your experience, does Posture process will cause/delay/slow for window PC logon pro...
If we have smart net license for 8 ISE VM (R-ISE-VMC-K9=). If we need smart net support do we have to apply for all 8 node ?
Hello AllWe are running flexconnect wifi and using the same ssid across multiple sites.We want to deploy a splash page at each flexconnect remote site for one of our ssid's We do not want to deploy all sites at the same timeSo is it possible to authe...
We've having some debate internally around when DNAC needs to log into ISE via SSH. In our environment ISE and DNAC are owned by 2 different teams thus we want to limit who knows what credential. What happened was because we learned that the SSH cr...
I am looking for some documentation on the integration between Cisco ISE and the Huawei AC wireless controller to validate compatibility, on the side of Huawei I found the following link:https://support.huawei.com/enterprise/en/doc/EDOC1000113779/19c...
Hi, I have an ISE running version 3.3, and I have the Aruba IAP running Aruba virtual controller. I'm trying to use ISE to generate a captive portal for the wireless users. Now the users are able to get the portal but once they are authentoicated, th...
Hi guys,i guess some of you are securing the AP switchports with 802.1x (EAP-FAST or EAP-TLS) and i was wondering if using SCEP for automatic certificate issuance and distribution works reliably. What is your experience with SCEP and EAP-TLS on C9800...
We are running a self-registration gues WLAN with sponsor approval. After a guest user has requested an account for this WLAN, ISE sends an approval request email to the sponsor. In this Email, the link which will trigger the approval is generated by...
