My work center is considering downgrading our ISE v2.3 to the ISE v2.2 on our two SNS 3415/3495 appliances. Are their any special considerations we should take? Does anyone know why the higher version is EOL before a lower version.We are doing this...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! MAC Problem
Hello, I encountered the below problem.I have an endpoint that gets unauthorized while it should be authorized.In the switch, the mac of the aforementioned endpoint is on another interface, not the one that the endpoint is connected to. The strange ...
Resolved! Cramer to ISE integration
Hi Team, We would like to check the capability within Cisco ISE to consume an external API (through JMS or webservice). We want to replace the existing push mechanism (from Cramer to ACS) with a pull mechanism (ISE pulls from Cramer through a batch ...
Resolved! ISE 2.6 Patch 6. No TACACS+ Live logs
Hey everyone.I have an issue with a brand new ISE 2.6 distributed deployment which I upgraded to the patch 6.I added a first group of network devices and configured a test Device Admin policy. The authentication works perfectly however there're no lo...
Hi, I understood tht wifi AP connected via switch ports back to Wifi controller. How does the authentication works? Is the cert stored in endpoint authenticated with Wifi controller only? Does it means tht I must allowed Wifi AP (connected via switch...
Resolved! Intune - MDM
This question is more of an architecture question. Intune integration has been working fine with no issues. However, looking at this closer, I'm seeing that the PAN's cert is uploaded/trusted by the OATH app on the Azure-side of the connection. This...
Hi,I am trying to migrate LNS function from a CISCO 4431 router to a CSR1000v virtual router, but the VPDN not working after migration. I am thinking about a bug or a software problem on the CSR1000v, but couldn't find a related topic on the bug sear...
Resolved! Cisco AP 2700 profiling
Dear community,I am having a nightmare profiling a Cisco AP 2700. I have used sensors and created a profile matching the details but no success. Even the built in one does not work. If I use the Cisco-Device endpoint profile it matches. However, we d...
I am currently researching a second factor implementation on multiple Cisco IOS-XE and ASA products and was hoping to be able to use TACACS+ built into ISE for authentication, but with an external TACACS+ server with PAM module installed to support G...
Resolved! cisco ise and duo integration
Hi,I am using cisco ise as primary authentication for vpn users . Is it possible to integrate duo with ise as secondary authentication for only vpn users Thanks
Resolved! cisco ise license -wired
Hi,If I buy base license , can i do .1x authentication , or do I need to buy wired license Thanks
Hello Community, I need to print out the current date and time in Cisco ISE Sponsor Portal Print Notification. Is there a way to do this? If I try to insert the date using JavaScript printing does not work at all: <span id="date"></span> <script> v...
Hello Everyone , I am in a middle of deployment on customer infra and we perform posture checks on endpoints . One check that customer wishes to deploy is to check somehow if the workstation (Windows OS) has more than one Lan ethernet Adapter. Does s...
It is disappointing that the Retire isn't available today, especially RADIUS supports something similar, ie, secondary shared secret. It's only supported via GUI. That is a major deficiency, IMO. Can you please make it a priority to have it supporte...
