Network Access Control

Hello   Does anyone know why an ISE node would be sending the same reverse DNS query every 10 seconds?   The PTR record exists and ISE gets a valid reply - the PTR record has a TTL of 20 minutes - why is ISE asking every 10 seconds?   In the event wh...

Dear All, We want to buy new cisco ISE. We are planning to make it work as stand-alone, and we will enable Policy Service Node (PSN) feature on it.Do we need to purchase device administration license? Putting on mind that we will just use it as Radiu...

Hi We have an ISE 2.6 implementation and have been using the MIC on the phone for authentication. However this month the MIC cert on the 89XX phones has expired. Its not possible to change the MIC or practical to replace 1000's of phones. I wondered ...

Hi everyone,atm we are migrating our RASVPN-Gateways from our old Cisco ACS to ISE. Within our deployment we have 4 PSN which are behind a F5-LB. I'm aware of the existing guides to setup loadbalance RADIUS, but I noticed that our setup is really unb...

Hi A client has asked for 600+ Cheap Mobile phones to be added to wireless so they can use Wifi Calling.No model has been decided yet, looking for the best way to add these on the wireless. Thinking iPSK and import the MAC to endpoint group.  This wo...

Hello everybody. I’ll upgrade a ISE 2.4 Cluster of Five Nodes to 2.7I’m reading the upgrade journey guide ( https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/upgrade_guide/Upgrade_Journey/Cisco_ISE_2_7_Upgrade_Journey.html ) and I have a questio...

Hi, Currently both AAA radius server is DOWN but there are some hosts in Status: Unauthorized.As I know, when all AAA servers down, all hosts should be in Status: Authorized.May I know is it the config issue here? Wht I worried is tht when the host i...

HiCurrently both AAA is DOWN, can I said tht all hosts is automatically authorized now (i.e permit ALLOW)?But i saw some hosts are Unauth. I thought all HOSTS are automatically "Auth" if AAA server is down?Is there any reason or how to further verify...

Dear Teams ; I configured email alerts for some alarms for a year everything works well , but now i do not receive any alarmhow can i send test email for ensure that's the smtp server work fine thanks in advance

May I know how do i check radius server or re-initialize the whole authentication process?RADIUS: id 2 State: current DEAD. I can ping clsauth2 10.4.4.2, but it shows DEAD. Wht could be the reason? aaa group server radius CLS-authserver name clsauth1...

Whether I am logged in as an Admin or another user I am unable to save this option.I am successfully able to save and check the box for "disclose invalid usernames".I am successfully able to click "show invalid usernames for specific time" and change...

We send syslog messages from ISE to LogicMonitor. Is ISE marking this message as INFO or Error? I don't see the settings for this specific alert in ISE to change/check the alert level.I want this alert to be seen as INFO or at least Warning in LogicM...

Hello community I'm currently preparing a migration from ACS to ISE 3.0. We use ACS as TACACS service for all our switches and we have local user accounts. Because of security recommendations I'd like to move away from local accounts to AD authentica...

i was asked to create an admin group that only have access to certain menu access and RO permissions, but when i create a new policy in the admin access, even if i use the "read only admin data access" in the policy, the users can modify the dACL Why...