Network Access Control

Hello allI have three simple questions that I would like to know the answer, since I never done it before.I have in production 2 nodes with PAN,MNT and PSN (One Primary and one Secondary) and I will take out the PSN role to a dedicated machine. So my...

Hi Guys,I am struggeling with followig topic and maybe someone solved it already.We have a distributed ISE enviroment. Our goal is to send automatic reports to a central sftp repository. Due to security standards authentication for sftp is only possi...

Hi Experts, We've ACS 5.8 and would like to integrate it with the FMC and FTD for Radius based Authentication. Can you please suggest the Radius attributes for Read-Write and Read-Only to be pushed from the ACS? Also, please let me know if the below ...

Hi there, and thank you for reading. Been out of IT infrastructure for a number of years and struggling to get up to speed rapidly.Im looking at an existing ICE system supporting AAA/ Profiling/BTOD/Guest/Posture services.We are looking to add some t...

Hi Team, As far as I understood logs between MNT nodes are not synchronized. They work as active/active. All nodes in the deployment send logs to MNT nodes simultaneously. When Primary MNT goes down PAN switches to Secondary MNT and reads logs from i...

Currently have ISE guest portal working for "sponsored guest id's" in ISE , and have added AD lookup in the Guest Portal Sequence.User case is to allow only one specified AD group access to the guest portal/internet , but currently it appears that an...

Hi, Right, but here goes:  My scenario is that the firm I am working with have already bought machine certs, but at the same time ideally want to deploy differentiated dot1x access based on user attributes. They do not seem willing to buy user certs,...

We have two domains as part of our ISE HA node deployment.  We are noticing some of our policy nodes cannot authenticate to one of our domains and it has ended up being that it is just one AD server.  I know ISE will reach out to the domain and which...

I am in the middle of a new deployment on ISE 2.6 patch 8 deployment. When attempting to change the Guest Password Policy to make password 8 characters and click save we get the following error. Can't find any bug reference. Anyone else seen this iss...

After starting ISE 2.4 on Hyper-V, Hyper-V logs the following Error: <HOSTNAME> has encountered a fatal error. The guest operating system reported that it failed with the following error codes: ErrorCode0: 0x3A77E47, ErrorCode1: 0x40000000, ErrorCode...

Hello, is posturing supported when combine with DAP on the ASA for anyconnect? The issue that I'm having is that the client never gets redirected to the CPP portal to get the posturing module added and Cisco TAC is saying posturing might not be suppo...