Network Access Control

Hi Guys,I am deploying a device admin in ISE and the plan is to have rules per privilege level (e.g. 1 - 15). I am having some concerns/issues for the privilege 1 to 14. For example for privilege 1, I configured Shell Profile with default privilege o...

Hello, I have a prime infrastructure server (v3.4) currently configured with external authentication using PAP method.An audit recommends we move to CHAP authentication, but we also want to authenticate users based on AD accounts.Is there a way to ac...

Hi AllWe are embarking on a segmentation plan for our company and the goal was to limit lateral movement and to limit the impact of ransomeware/malware causing impact.We are looking to do things like limit risky protocols between devices such as rdp ...

Does having high disk space utilization (alerts are visible) for a PAN node that also has a PSN personna affect the PSN operations?

Hello,   We have an ISE deployment running ISE version 2.3. We recently deployed ISE patch five to the setup. Afterwards, only the Primary admin node became connected. Under Administration > Deployment, the rest of the nodes show "Not in Sync" with a...

Possible to generate daily email for the ISE alarm events?

We have specific users that have both an Admin account and a normal account.  We are using EAP-TLS and have found that they fail authentication.  ISE responds with a:  24324Identity resolution detected multiple matching accounts 24417User's Groups re...

Hi everyone Any urgent help to fix this error on my code  Traceback (most recent call last):File "C:\Users\ghibuser\Desktop\ISEInternalUserTest.py", line 25, in <module>identityGroups = sys.argv[11] # “Employee”IndexError: list index out of range Thi...

Hi Everyone ,I am creating python script for Internal user for Cisco ISE  .  I want to  know if the code format is okay to run the code .  Any help of how to run with command line  or python interpreter   #!/usr/bin/pythonimport requestsimport jsonim...

I want to authenticate a device which is not on the domain (not connected to AD), using certificate. Is it possible to do certificate based authentication using the ISE default certificate? by generating CSR. etc.The device doesn't allow username/pas...

Gentlemeni've some deployment 2.1 with single dot1x policy matching CAP.Dot1X : If Wired_802.1X ORWireless_802.1XAllow Protocols : Default Network Access andDefault : use MyPKI_Certificateendpoints configured for EAP-TLS authenticate nice.but i have ...

Hi Everyone ,I created  a python Script for Cisco ISE Internal Users   I got this error while run the scriptIndexError: Replacement index 7 out of range for positional args tuple This is my code #!/usr/bin/pythonimport http.clientimport base64import ...