Dear all, A reseller implemented ISE test licenses in a customer network environment, they have now expired. Customer has baught new live licenses from us. Question: Do the test licenses become live licenses or do the reseller have to do the impl...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
According to the latest ISE ordering guide https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf, Plus license is not required if user and endpoint contextual attribute is exchanged - "User and...
Hi Experts, Recently I have found lots of info which is a mismatch between ISE VM license and the performance, hope someone can clarify my confusion about this. Thanks very much in advanced! First I have checked the administrator guide for ISE 2....
Hi, How does ISE know that a Windows machine has a particular critical patch installed? I was expecting that ISE had a registry signature under the "Patch management condition" for each new patch released by Microsoft, however, it doesn't. Does ISE r...
Resolved! 10G SFP+ option for SNS3655 appliance
Hello,Since SNS 3655 only offer 10G Base-T connection, is it possible to order a 10G SFP+ card to allow the appliance to take 10G fiber instead?
HiI have been asked to convert a Sponsored guest to a Self-Registration guest service with the same account expiry.Is it possible to migrate Sponsored guests to Self-Registration guests? Or do the current guests just have to start again?Can they use ...
Hi Team, Can anyone help me with few questions regarding the ISE PIC which I couldn't find documentation or reference for the below items1. Whats the scale or capacity of an AD agent? How many Events or Logs Per Second is supported on each AD agent?2...
Good daySuppose i have two device administration policy set rules (Rule-1 and Rule-2), is it possible to create two separate Administrator user groups, with group one having read-write access to rule-1 and no write or read access to rule-2. as well g...
Hi , I am deploying ISE to Posture VPN users ( ASA is the NAD ). I want the users to be authenticated using LDAP ( which is already configured in ISE ) in addition I want the User to receive an OTP via SMS using an external server . Can this be done ...
HI I am looking for documentation for certificate based authentication on Cisco ASR where the CA is a Microsoft based deployment. Can someone please tell me how this is done or provide a link to a document for the same? The basic idea is to use EAP-T...
Hi Experts,I am integrating the Juniper 2200EX running JunOS 15.1r with ISE ver 2.6While the authentication via dot1x goes well and the endpoint gets the IP address. The final access is just permit access in authz profile.When I try to take a remote ...
Hi all Can someone answer the question how many Active Directory domains can be handled with one instance of an ISE-PIC? The number I found is up to 100 domain controllers are supported (via a client or WMI), but are these DCs from one domain or mult...
Hi team, I need to quote an HA deployment for ISE Device Administration in 2.4 and after reading through Krishnan post https://community.cisco.com/t5/security-documents/cisco-ise-device-administration-prescriptive-deployment-guide/ta-p/3738365 coul...
Hi , I am trying to make ISE's self signed certificate to be trusted by my computer for admin access and for portal redirection ( same certificate ) . I extracted the cert (.pem) and then I renamed it with extension .cer in order to be executed by my...
Hello, although not strictly an ISE issue, a customer has changed the UPN for a few Active Directory users.For example, FROM- FirstnameLastName@customer.com TO - Firstname.LastName@customer.com. This is not being reflect in the new certificate which ...
