Network Access Control

I need assistance understanding how Cisco patches work. I received information of vulnerable versions of ISE affected are 2.2(0.471), 2.2(0.905), 2.3, 2.4, and 2.5? If I am running version 2.7, I'm good? Don't want to assume that all product updates ...

My work center is considering downgrading our ISE v2.3 to the ISE v2.2 on our two SNS 3415/3495 appliances.  Are their any special considerations we should take?  Does anyone know why the higher version is EOL before a lower version.We are doing this...

Hello,  I encountered the below problem.I have an endpoint that gets unauthorized while it should be authorized.In the switch, the mac of the aforementioned endpoint is on another interface, not the one that the endpoint is connected to. The strange ...

Hi Team,  We would like to check the capability within Cisco ISE to consume an external API (through JMS or webservice). We want to replace the existing push mechanism (from Cramer to ACS) with a pull mechanism (ISE pulls from Cramer through a batch ...

Hey everyone.I have an issue with a brand new ISE 2.6 distributed deployment which I upgraded to the patch 6.I added a first group of network devices and configured a test Device Admin policy. The authentication works perfectly however there're no lo...

Hi, I understood tht wifi AP connected via switch ports back to Wifi controller. How does the authentication works? Is the cert stored in endpoint authenticated with Wifi controller only? Does it means tht I must allowed Wifi AP (connected via switch...

Hi,I am trying to migrate LNS function from a CISCO 4431 router to a CSR1000v virtual router, but the VPDN not working after migration. I am thinking about a bug or a software problem on the CSR1000v, but couldn't find a related topic on the bug sear...

Dear community,I am having a nightmare profiling a Cisco AP 2700. I have used sensors and created a profile matching the details but no success. Even the built in one does not work. If I use the Cisco-Device endpoint profile it matches. However, we d...

I am currently researching a second factor implementation on multiple Cisco IOS-XE and ASA products and was hoping to be able to use TACACS+ built into ISE for authentication, but with an external TACACS+ server with PAM module installed to support G...

Hi,I am using cisco ise as primary authentication for vpn users . Is it possible to  integrate duo with  ise as secondary authentication  for only vpn users Thanks

Hi,If I buy   base  license  , can i do  .1x authentication , or do I need to buy  wired license  Thanks 

It is disappointing that the Retire isn't available today, especially RADIUS supports something similar, ie, secondary shared secret.  It's only supported via GUI. That is a major deficiency, IMO. Can you please make it a priority to have it supporte...