Hello,We are currently in the process of preparing for a migration from a pair of ASA 5525Xs to a pair of 2140 FTD appliances. We have SAML authentication configured on the ASAs for MFA to our Azure instance for AnyConnect remote access VPN which wo...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! Posture Eset Endpoint AntiVirus 8.x
Hi,ISE 2.6. We use posture and some endpoints have already have eset endpoint antivirus 8.x. This release is not present in ISE yet. When will it be added and how? By patch or automatically downloaded from Cisco?thank you
Resolved! Cisco ISE change Domain Name
Our ISE deployment was setup with our internal domain name of csi.corp, when presenting the guest CWA this is the domain name the is presented tothe guest. We would like for this to be out public domain and a valid certificate. From what I have gat...
Hello Community, We have Two ISE nodes configured as primary and secondary for every persona. And the two nodes (ISE01 and ISE02) join to same Active Directory Domain (Acme.com). This domain has two instance of Domain controller (dc1.acme.com and dc2...
Resolved! NMAP rescan interval
Hi, if NMAP is used for Profiling devices is there some kind of interval which reruns the scan to check if the device is still the same.I know there is some kind of overload protection for the Node but is there some kind of verification like (if nmap...
Hi, I have two ISE virtual appliance (2.7 Patch 2). NAC is currently being deployed on the network as we are at a Proof Of Concept stage and the network is OPEN. Desktops: I have the following configured on the desktops: wired auto config service s...
Resolved! ISE Posture - issue for WFH users
This is affecting some WFH users , not all. At home user is on their wireless network - AnyConnect authenticates but COA never changes to postured/allowed , is stuck on the ISE redirect ACL Same user , same laptop connects to Ethernet at home everyth...
Hi All, We have 2 ISEs in 2 different DCs which is configured in a cluster. I need to setup 2 wireless services for my client: corporate wireless and guest wireless. Just wanted to know if its possible to setup both services pointing towards the same...
Hi We are using ISE 2.4 and are using enforcement (closed) mode at our main office. It is working fine on all our switch stacks (3850 version 16.6.6). I take the same configuration and apply it to another location using the same ISE appliance, same s...
Hello guys, I'm trying to configure 802.1x on my LAB environment on a old catalyst 3650 to connect to ISE. Switch Ports Model SW Version SW Image------ ----- ----- ---------- ----------* 1 26 WS...
Getting the error below when using PassiveID and trying to add Windows 2012R2 DC:"The connection was tested on 'isemain.cyber.lab' PassiveID active node. Connection to 'maindc' failed.Unable to connect to the machine, please check the DC state"Test u...
Hello everyone,Quick question, we are in the process of shutting down our ACS along with the SSID that are still using them, our team would like to create a splash page once the user authenticates with 802.1x, I created the auth profile on the ACS, i...
Resolved! ISE upgrade from 2.7 to 3 - Mixed
Hello, I have two PAN servers and two PSN servers (one PSN in a DMZ) running ISE 2.7 that I'm keen to upgrade to 3. I've been reading the docs and see the recommended method is to create new VMs (backup and restore) and join them to the cluster, that...
Dear community, Hope all good at your side. I am working on the configuration of Cisco ISE 3.0 802.1x in a project and during the process I am facing an issue with Authorization.Cisco ISE shows: 1 Misconfigured Supplicant. The details of this Misc...
Hello,We are planning to migrate to use PEAP and EAP-TLS as authentication method.We have Root CA and several intermediate CA(first and second) all on Microsoft.We've imported Root CA and intermediate CA(first) Certificates in Trusted Certificates on...
