Network Access Control

For an ACS to ISE migration, an organisation is using ACS 5.8 and doing MAC address authentication for access points which use Radius for authentication.   The question is, with ISE, do MAC address authentications count towards the 100 Base count all...

Hi,I have a customer that wants to deploy Cisco ISE for approximatively 500 endpoints on ARM Processor based servers.   I just wanted to confirm if it's feasible? If yes, what are the requirements in terms of resources?   Thanks in advance for suppor...

Hi I am trying to implement a bulk delete of Endpoints via Cisco ISE API (v2.4). I have to admit, it's a challenging task because API documentation is really poor when it comes to Bulk operations. In particular, all examples provided relate to BULK C...

Hi all, I'm going to migrate from ACS 5.5 to ISE 2.7. So, I need to backup configuration on the ACS for staging environment. But I'm stuck with backup is already in process issue. I found no way to manually stop backup process without restart.Since t...

I would like the ability to remove or grey out options in the Anyconnect preference tab, specifically, "Allow local (LAN) access when using VPN (if configured)". Is customizing the Anyconnect client in this way possible? Thank you. 

Hi all,What is the role VSA (vendor specific attribute) in Radius and why it is important?When we configure Switch to integrate with ISE, we need to send vsa information to ISE. What will happen if we don't add vsa config in switch?Sorry for my quest...

I have a question in regards to modifying the ISE VM.   If you have a small VM license, can you increase the disk size prior to initial power on, after deploying the OVA,  or does that break license? For example, small VM shows 600GB,  prior to initi...

Hi All, If you have a 2 node virtual ise deployment where ISE1 is Primary PAN, Primary PSN, Primary MnT and ISE2 is Secondary PAN, Primary PSN, Secondary MnT, but then for whatever reason decide you want dedicated PSN's,  is that possible?   Could yo...

Dear all,I have an issue with profiling services, which is not working for cisco IP phones.  Setup : 1. Cisco IP phone testing with CP8811.2. Cisco ISE distributed mode in 2.6 patch 73.L3 interface is configured with DHCP IP helper for PSN nodes Issu...

My customer has a single standalone ISE, running on a VM Host, vers 1.3. They want to increase the use of the ISE, so are proposing that it should be upgraded to the latest revision (2.x) and a second ISE. My question is simply this: Which is the saf...

Hi,Our ISE 2.4 nodes take up lots of resources from the original OVA file deployment. We would like to resize it based on the usage in vmware. Would there be any issues? Any suggestions if we do resizing?

Hi guys, I am trying to create a policy set rule for network access in which I would like to do 1 big OR in between and 2 AND but I could not find a way to do it.  Thanks,Chris.