Has anyone upgraded from a 4 node ISE cluster with Primary and secondary Admin/Mnt nodes and two PSN nodes to the following 2 node cluster with primary/secondary Admin/Mnt/PSN persona Is the best way to do a fresh build and config or will backup and ...
Hello friends, I am trying to create new node with latest version of ISE and restore backup from old deployment.Do I need to restore backuped config to psns and secondary admin node before registering in new deployment?Or is that enough restoring bac...
hI, It seems the Radius DEAD and ALIVE logs were occuring every few minutes. User complains it affect their access. However I thought when AAA down, all hosts will be AZ (authorised)? It seems AAA servers intermittent reachability frm the switch affe...
Hi Experts,We're running ISE 2.6 with Patch 8 installed. AnyConnect is 4.8 and the Compliance Module is 4.3.X. I've been asked to configure a New AV Posture policy Definition check for Windows Defender. Name: AV_Def_5daysCompliance Module: 4.X or la...
Has anyone been able to integrate both Azure AD and on prem AD to authenticate devices?
Hi I'm trying to set up a Guest AD for guest users using the wired method. however, I don't want those users to join that domain since they will temporarily be using this domain when they are connected to my network. can I use cisco anyconnect as Dot...
Does anyone know how to update the secondary PAN UDI in smart licensing? I deregistered the secondary node, updated smart licensing, added the node back as a secondary, updated smart licensing again and it's still has the serial of the old primary m...
Hi Everyone I am new to Cisco ISE with python and I would like to create ISE Internal User with python script import requestsimport jsonimport argparseimport sslimport urllib3urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning) url =...
Hi Everyone I am trying to Create an Internal User with cURL and JSON on window command prompt for cisco ISE. prompt but I am getting these errors over again . can anyone help me outthis is curl commandcurl --insecure --include --header 'Content-...
Hi Everyone, I'm having an issue with TACACS commands sets where all the commands that I am trying to deny after I enter conf t are not being denied, they are still being allowed. I'm attaching a screenshot of the command set. I'm trying to isolate t...
Hi Everyone I am trying to Create an Internal User with cURL and JSON on window command prompt for cisco ise. prompt but I am get these errors over again . can anyone help me outthis is curl command curl --insecure --include \ --header 'Content-Ty...
We are just starting to test using TEAP with Windows and Cisco ISE (EAP-Chaining) rather than use the AnyConnect NAM module. We have deployed Workstation Authentication Certificates and are trying to get the machine authentication done via certificat...
Hi, Recently through GPU installed MS teams certificate on all Desktop machines, Now two Certificates are popping up on Desktop machines causing a hindrance.Wired connection is autostartup on Anyconnect supplicant and then its giving a choice of two...
Hello All, We are deploying a NAC solution for one the customer. There was request came from client on the temporal agent, is there any way we can avoid the downloading each time the temporal agent for compliance checks. Can we push these temporal ag...
We use iPSK for devices which don't belong to the company but require internet access, so this goes via a mobility anchor I'm just testing for a internal version of the ipsk, but all traffic seems to be hitting the policy for the external setup.The c...
