Network Access Control

Team,We are looking at some guidance on wireless authentication using MS CHAP and active directory credentials.Can someone help? Thanks!!N.

1. Does it support the current version of Windows on which the client computer can be confirmed?2. Does it support WSUS updates?3.Is it possible to check whether the client computer's windows update is updated correctly?

What are the best practices for monitoring ISE using SNMP polling? I'm aware of this document:SNMP Traps To Monitor Cisco ISE ProcessesCisco Identity Services Engine Administrator Guide, Release 2.1 - Monitoring and Troubleshooting [Cisco Identity Se...

Hello, I am facing a strange issue on ISE 2.6 deployment (latest patch installed). I have windows clients (7 & 10) authentication through EAP-TLS. They offer 14 ciphers during the TLS handshake, with TLS_ECDHE_RSA_AES256_CBC_SHA being the strongest o...

Dear,We are about to implement Cisco ISE to authenticate our Wifi users and give them access to the internet, but we have a special requirements. I will explain this with a example: Assume we have a Active Directory domain of: xyz.com, all our Wifi u...

Dear All, we are running Cisco ISE 2.6 version and configure guest access when we connect to SSID filled form and connect through credentials we don't get internet when we disable and re-enable wife we get internet means first time we don't get inter...

Hi,I tried guest flow in ISE 2.7 and I'm facing issue with initial MAC authentication for redirect. I have standard configuration - identity source Guest Users with "If User now found" option set to Continue - the standard settings I guess.When the M...

Hi,  We recently installed a patch on both our ISE Wired and Wireless to fix some bugs. During reboot I noticed that Application Server on ISE Wired takes too long to be on running state compared to Wireless when issuing command "show application sta...

I am having a hard time figuring out the licensing required for ASA (5545-X) to ISE. On ISE< I have plenty available Apex licenses. On the ASA, I have plenty available Premium licenses. I am trying to get basic AAA between the ASA and ISE (NO posturi...

Hi, Newbie here. can help regarding below. What are the needed ports to be allowed on firewall in order for Profiling to work.for example from Endpoints -> FW -> ISE or vice versa? Thanks a lot in advance. 

We have two ACS 5.8.1.4 servers, working in replication, and 6 Domain Controllers. The project plans provide for the integration of ACS servers with only two of the 6 DCs.After configuration, ACS primary and secondary are joined and connected with 2 ...

Hi,following this document : http://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/119374-technote-dacl-00.html#anc17 as per best practice 'it's recommended to disable IPDT on a trunk port' and to disable IPDT on a per-port basis, two command...

When does ISE consume an APEX license? When a authorization result requests a vulnerability scan, or when ISE provides a result based on the resulting CVSS?   Thanks, 

We are trying to get our ISE 2.6 to take radius accounting packets (from Aruba Clearpass) and convert them into Identities to then pass off to our FMC and FTD. We are seeing the endpoints show up in ISE and we see all the correct information however ...