Hello ISE and TrustSec experts, Can you please provide explanations or better, point towards Cisco guide explaining numbering suffixes for SGT? Why on most occasions SGT ends with -00 suffix, but not always?For example, for default TrustSec_Devcies S...
Guys,After a search in the docs I couldn´t find what is this status "Pending Deletion" in the "Blocked on" line.sw#sh authentication sessions int gi 1/0/12 det Interface: GigabitEthernet1/0/12 IIF-ID: 0xC6E48000006674 ...
Hi,I was setting up Self-Registration portal for Guest network in my network using Cisco WLC and Cisco ISE. I was able to setup the config as per recommendation in YouTube link https://www.youtube.com/watch?v=KYfdAQciOVE. However When end user trying...
Hi all,One question: Does Cisco ISE have API for administration? We are using ISE as CA and User database and I want to make code to delete users and related certs automatically when user is leaving the company?! BR,Orkhan
Dear allCisco ISE 2.6 in live logs it show time stamp not correct like 16/8/2087I checked ntp and timezone it correct both nodeanyone saw issued please helpi did add picture about live log
I have a scenario where in a corporate user connects to vpn and will go through posture check via ISE. Now if the user machine goes to compliant state, and intentionally disable/uninstall (e.g. windows firewall) can ISE detect this in real time and a...
Hi Team, Customer is looking to implement 2FA on their ISE deployment in their Production Control environment. They have an established RSA infrastructure that they are looking to leverage. They have deliberately not integrated ISE into AD and are ...
Hi, Customer is trying to figure out a way to create a report of the MIC certificates in their Cisco IP Phones and their date of expiration to plan for the implementation of LSC. Since we can use the "Days to Expiry" attribute in an AuthZ policy ...
Hi Team, I am trying to upgrade ISE from v2.4 to 2.7 currenlty and am stuck at an annoying part where I am unable to get upgrade bundle copied over from a Windows Server based SFTP repository to ISE local disk. The port 22 communication is open and ...
Hi Experts, We've small node (2) deployment with the same certificate used for Admin and EAP authentication where one of the Intermediate cert in the certificate hierarchy is about to expire. Could you please let me know the process to renew the Inte...
Hi guys,Running ACS v5.8 and created an admin account in the ReadOnlyAdmin role but when they try and login to web gui(https://<ip address>/acsadmin) they get Access Denied. If I make them a SuperUser they get on fine........any ideas for ReadOnlyAdm...
Hi,I would like to ask for experts' opinion on how to address the following design scenario: We currently rely on Posture (Anyconnect based) for NAC via ISE for granting endpoint access to our network (per VPN as well as WLC based) based on a given s...
Hello, I have a new ISE deployment with two nodes. I have a problem with user authentication against Active Directory. When I try to authenticate a user I get the following error:24371 The ISE machine account does not have the required privileges...
I'm stuck attempting to integrate ISE with RHEL IdM. First off, I'm not a directory services guy, and those servers are managed by another team in my company. I'm trying to follow this document but it still isn't entirely clear to me. When I create a...
Hi Experts, We're running ISE version 2.6 Patch 7 installed. On SAN, we noticed, it's left the AD and in the Report->Diagnostics, it showing as ISE account password update failed. As per the below URL, ISE machine account has set the privileges to r...
