Network Access Control

Cisco ISE NAD DB import Export

Hi All, Having a strange issue, trying to import network device DB from 2.4 to 2.6 and getting an error. Header Name: String(32): Required is missing Tried many things manually create a list , filling information in the template etc but the same erro...

Resolved! Query Guest Custom Field in Authorization Policy

Hi all, one of my customer would like to create their own custom fields for guests (in Guest Access -> Settings -> Custom Fields) and query them within an authorization policy to assing a corresponding authorization result. However, the only fields t...

Posture behaviour

Hi, I am testing the Posture module for compliance check on a wired network and seeing strange behavior. I have added only one NAD (Switch) in ISE, No WLC(Wireless is integrated ). But WLC is connected in the same network and can ping ISE. Posture o...

IntIntegration of ISE 2.3.0.298 (Cisco) against Mobility Master 8.4.0.7 (Aruba Network).

I am working on Integration of ISE 2.3.0.298 (Cisco) against Mobility Master 8.4.0.7 (Aruba Network).The scope includes the creation of authorization and rule policies in the ISE for 2 types of guests that the SSID Guest will have; Guests of invited ...

Resolved! Cannot join AD in ISE 2.4 | CLOCK_SKEW

Hi, I'm trying to join my AD in ISE but getting an error. ISE is at 2.4 AD is Microsoft Server 2016 Here is the complete error: Result for ISE node: ise.securitydemo.net. Status: Join Operation Failed: Clock skew detected with active directory ...

ISE behaviour difference in identity being sent from ISE to AD.

Hi experts, We have a customer who is moving from ISE 2.1 to 2.4. They have identity rewrite configured for their ADs. When a user logs in with their ID and EAP-TLS has performed the identity sent from ISE is 'host/hostname'. ISE looks for 'host/h...

Resolved! ISE 2.4: Wireless guest failed auth msg: 5400 Authentication failed

Hello, Requesting help to troubleshoot below authentication fail error messages seen for wireless guest users. Event 5400 Authentication failedFailure Reason 22040 Wrong password or invalid shared secret ISE and WLC shared secret is correct.Guest use...

Resolved! Inquiry Cisco ISE distributed deployment faillover

Dear Experts, I am deploying Cisco ISE distributed deployment, 3 x ISE, ise01 is primary PAN, MnT, PSN node, ise02 is secondary PAN, MnT, PSN node, ise03 is healthy check, PSN node. And I also configured guest access with hotspot, 3 x policy se...

Resolved! ISE license for K12 school districts

Can anyone offer any guidance on a rule of thumb for how many ISE base/plus licenses would be typical for a school district that is interested in ISE for wired/wireless NAC including profiling? I'm thinking that there might be a rule of thumb based o...

Resolved! ISE Captive portal redirection to customer's predefined URL doesn't work on Android mobile

Hi, our customer is having problem with ISE captive portal redirection to custom URL after authentication on Android. The reason is once cell phone with Android connects to SSID it automatically pop-up window (pseudo-browse probably) with captive por...

Resolved! Hybrid / Medium Deployment PSN limit

hi team for this type of deploymet, there is a limit of <=5 PSNs. Can you please confirm if this is a hard limit inforced in ISE, or just what TAC will support up to? thanks Mark

Resolved! Anyconnect Apex vs Temporal Agent

Hi , Please what is the difference between the Anyconnect Apex agent and the temporal Agent for ISE 2.4? there is any comparison doc?Why the customer should invest in the anyconnect licences ? Thanks for your support. Best Regards.

Resolved! ISE Design queries

Hi Team, Want to check below design possibility for 25K users (will increase 20% - 30% in future) PAN-MNT on single 3695 node ( as per guide, it can support 50K in hybrid deployment)Two 3655 as PSN (can handle 25K sessions per PSN in hybrid deploymen...