Network Access Control

For the light data distribution feature, in the docs it says it spreads it to PSNs in the distribution via the messaging system. I'm assuming this is spread to ALL PSNs in the deployment? Or only to the other PSNs in the node group? It sounds like AL...

Hi Guys,I am planning to migrate my old ISE running in my old server to a new ISE 2.7 that will be running in the new SNS server. Both old and new ISE are running in HA.What I planned so far are;1. Configure temp IP address to the ISE 2.7 and form th...

Hi I believe we're observing a bug behavior with one of our applications that uses Cisco ISE REST API.Can anyone from Cisco confirm the following? We try to query API to get a list of Endpoints using the following filter:filter=groupId.EQ.<id>&filter...

I currently have the following ACL.  I am unable to ping any server at any external/public IP.  I am not sure why.How would I go about fixing this?  Thank you very much! access-list outside_access_in extended deny ip 51.222.38.0 255.255.255.0 any4acc...

working on a ISE migration from 2.3 to 2.7 p1   virtual environment where i did a full backup and restore to the new virtual servers...no issues reported with restore....working to test AAA on a couple switches before migrating the entire environment...

Hi All,Please confirm my thought process for migrating ACS 5.x over to an existing 2.4 patch 9 ISE deployment.Using SNS 3655-K9 appliances.Downgrade SNS-3655-K9 as its shipped with ISE ver 2.6Use ise-2.4.0.357.SPA.x86_64_SNS-36x5_APPLIANCE_ONLY.isoIn...

Hi All , I am trying to make a auth profile with advanced attribute setting . Its about sending a specific VSA back on access_accept or reject to a device. But this option show disable to me. Any idea why ? Thanks, Varun

Hello, Is anyone able to confirm the 10G capability of the SNS-3615 appliance?I've read through the documentation available on the Cisco site which states.. https://www.cisco.com/c/en/us/td/docs/security/ise/sns3600hig/b_sns_3600_install/b_sns_3600_i...

Hello, My company recently bought ISE and I'm having a hard time creating the User portion of the Authorization Profile.  Our idea is to have a User Authz Policy and a Machine Authz Policy (for PCs that don't have users logged in). We have ISE integr...