Network Access Control

Hi All- I have a two node ISE cluster ver 2.7 SP2.  I will be using this for a DNAC deployment.  Node 1 is Primary Admin, Secondary MonitoringNode 2 is Secondary Admin, Primary MonitoringBoth nodes show personas of "Administration, Monitoring, Policy...

Hello folks, I've got AnyConnect VPN set up on FTD and I want to write a different policy set for AuthN/AuthZ based on the group-policy that they're attempting to connect to. For example, if a users tries to connect to Group_A, I want them to hit a s...

I have been tasked to manually move all devices using TACACS+ authentication on an ACS 5.3.0.40 to ISE 2.6 (Patch 7).  I have moved a majority of our switches and routers to ISE successfully and I am currently attempting to move two Nexus 5548 switch...

I have the following setting at the Switch port.ip access-group ACL_DEFAULT inauthentication event fail action next-methodauthentication event server dead action authorize vlan 100authentication event server dead action authorize voiceauthentication ...

Hi all,i try to config anyconnect NAM and windows NPS with 802.1x Authentication, but no luck.i wondering if NAM only work with ISE only? regards,ivan

Hi, Guys, i wonder which HTTP header is valid when the Cisco ISE External RESTful Services APIs are used?

I'm trying to authenticate a network device and see the Access-Request come into ISE but it isn't matching the correct policy. What value(s) does Normalized Radius RadiusFlowType equals Wired802_1x look at? I am assuming one of the Attribute Value Pa...

Hello, we've ISE 2.7 patch 2 and Super Admin Access is authenticated by a AD-Group (external Identity Store), this works without problem.We've another Admin Group for an internal user-store, and this group is authenticated also external by another gr...

Hello community We're about to fully redesign our guest portal. Currently we have 2 SSIDs, one is for visitors which redirects them to a sponsor-based registration portal. A second SSID is for employees to "register" their BYOD devices and uses very ...

Hi, We planned to add cisco ISE to our infra. We will use 802.1x authentication for Wired and Wireless user.We already have existing AD and all the computers are joined to the same domain.What I would like to know is, after I've added Cisco ISE to th...

Hi,I did IOS upgarde on an ACS instance and tried to register to the primary instance. I am getting an error message "unable to register due to invalid hostname or IP Address".> The IOS is same as in primary.> DNS is resolving both ACS instances IP A...

I'm trying in REACT to fetch to following URL in ISE 2.6 https://<IP-MnT/admin/API/mnt/AuthStatus?MACAddress/<MAC:adr>/0/200/All. but every time I get the error :No ' Access-Control-Allow-Origin'  header is present on the requested resource. And in m...

Hi,I'm concerned about my switch configuration for 802.1x authentication with ISE especially the switch port configuration.We want to use 802.1x authentication with low impact mode for the user and we will use MAB if dot1x failed.Below is the config ...