Resolved! Posture Assessment for Sophos VPN users
Hello Everyone, We are looking for a way to apply posture assessment to users connecting to Sophos VPN client. The objective is to check for compliance like Antivirus.
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hi, Is there any option to permit an aplication/ or URL that is embedded inside a URL , for example I want to play youtube videos inside this URL www.gob.mx/segob but I cant because Youtube is blocked in another ACL by aplication.How can I create th...
Hi all,As part of an ACS migration to ISE, I am looking for metrics on the sizing of ISE servers which will initially carry the 3 roles Adm, MnT and PSN, for functions only Tacacs + (especially) and Radius (occasionally) for administration of 3600 de...
Hi community, I want to configure my AD as an external identity source for ISE CLI access. The only documentation I've found so far is this: https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_...
Hi, Why we are not able to get alerts on disk failure in ISE GUI 2.2 version. How we can proactively monitoring the Disc in ISE Nodes?
Hello, ISE 2.6 patch 7 PEAP Outer/MSCHAPv2 Inner 3850 switch IOS 16.9.4 Windows 10. 802.1x is enabled via GPO ISE logs show successful PEAP negotiation but when ISE sends inner MSCHAPv2 challenge....ISE shows endpoint supplicant abandon and start new...
Hello I am fairly sure that at some point in time it was possible to get a list of all the current MAC OUI prefixes that ISE can use during profiling. I have been to ise.cisco.com and downloaded all the packages, but they are gpg protected. And ...
Hi Experts,SetupISE 2.6 (standalone)Switch 2960 running IOS 15.2(2)E7Use cases is of dot1x and posture, all the client have AnyConnect installed.The issue that we are seeing is as follows, when for the first time of the day when a client boots up, th...
Can someone please help me out with this issue i am trying to figure it out.Ver: ISE 2.4802.1xAuthentication: PEAPAuthorization: AD User / MSCHAPv2 When i login at workstation, policy works fine and correct DACL is applied and user gets appropriate n...
Hi! I have a demo envrironment where I want to assess Vulnerabilities to a customer (then move to production licensed network). And I have this weird issue where the Adapter instance doesn't appear at the AuthcZ Profile: I followed the regular 3 step...
Hi, Does this means the laptop didn't log in to AD OR logout from his laptop? Thus failing dot1x authentication?Thanks!
I would like to disable port 80 on Cisco ISE . I'm not sure Can i do that ? ISE Version 2.6 Patch 3 Please advise me .
Hi, Radius log only can view for last 24 hours. Is there a way to check from beginning till current if the device has successfully pass authentication and session? Last 24 hours mostly show rejected due to MABThanks a lot!
Hi everyone, I have a scenario in wich I have to do posture check on remote users using Ciso ISE and AnnyConnect but in the other hand they are using Forticlient as RA VPN. Can this be done? And if so could you help me with some kind of configuration...
Hello, I have ISE 2.4.0.357, I'm trying to create a certificate provisioning portal, followed steps in guide and as soon as I click save, I get an error "Critical Unauthorized", it does not seem to be privileges as I'm using a super admin account, Wh...
