Network Access Control

Good morning experts,I have a question in regards to DHCP snooping as I understand this feature must be enabled for the Device Classifier.  So here we go...We have a couple of branch locations that utilize a router-on-a-stick design.  Basically we ha...

Hello, I want to upgrade a Test-ISE from 2.7 to 3.0 and I think first I need to convert to Smart Licensing, this is right?when I want to register to Smart License I can use a proxy, but the proxy address is http://webproxy.company.int:8080 and if I w...

Hello all,I have set up a demo lab and am trying to learn how best to secure ISE. Now I am wondering how to secure the access to the Sponsor Portal.I use interface 0 I for management. Interface 2 and 3 I have bundled for the data. If I would manage t...

Is it correct that DHCP snooping is used by IPDT feature specifically for having IP address information in the RADIUS access session, but not for Device Sensor based dhcp profiling (RADIUS Accounting based)? In other words, is switch DHCP snooping re...

We are implementing dACL with RADIUS on a C9300 switch with IOS 16.9 Our configuration seems to be correct and we have the inbound dACL working on a switchportCisco-AVpair = "ip:inacl ...." But the outbound acl is not applied or rejectedCisco-AVpair ...

hi ,i hope that you are doing good. I want to ask you if can i install cisco ise 2.6 in vmware workstation 15.2.2 ?  Thank you to find in attach the capture when i use iso file and ova file. best regards.

Hi all,We’ve deployed Cisco ISE in our DC and we planned to control 802.1x wireless access from branch sites. We’ve already configured VPN tunnel between DC and Branches.  We would like to configure Dynamic VLAN assignment to the client PCs on branch...

Hello, I have seen a few questions about generating specific reports in ISE and Prime and DNAC. I wanted to get assistance with creating reports that I want for a any timeframe. Also, how to set these reports to generate regularly (example every 30 d...

Dear Team,I'm facing issue with alarm "COA Failed"it alert everyday and every minute.Note: currently i using ISE 2.7 patch 3 DescriptionNetwork Device has denied the Change of Authorization request issued by ISE Policy Service nodes.Suggested Actions...

Hi Team,I'm currently using Cisco ISE 2.7 patch 3 and now facing with alarm "Profiler SNMP Request Failure" It alert everyday and every minute. We followed the suggestion actions that provided from Cisco but after verified SNMP configuration and SNMP...

ISE is pushing DACL on a switch port but my required communication is not working. Just wondering if there is a way I can debug or see what is being blocked by this DACL???  Kindly help.

Hey, I am currently overseeing my company's WLC migration. We are currently using a pair of 5508s and will be transiting to a pair of 8540s. Will need new licensing or can we use the ones we already have?  Thank you so much for your input and experie...

Hi All,We're currently using ISE 2.6 and looking to upgrade to ISE 3.0. One requirement is to use Smart Licensing before upgrading. I've read through the following article https://www.cisco.com/c/en/us/products/collateral/security/identity-services-e...