Network Access Control

Am creating a user and want the secret to use level 5 encryption.When i sue this command,"username [user] privilege 15 secret 5 [Cisco password]"I get the following error "The secret you entered is not a valid encrypted secret.To enter an UNENCRYPTED...

Hi , ISE is integrated with AD and used for authentication users and device access admin, normally it use TLS 1.2 for the communication between ISE2.4 and AD 2016, right? anyone can please advise, thanks.

Hello, I am curious to know , if a Cisco VPN AnyConnect is configured and for Posture of this VPN we use Cisco ISE , how Cisco ASA forwards the traffic to Cisco ISE when it does Posture. I have 2 Cisco ISE and I know that PSN is always Active Active ...

Hi All,I am working on Cisco Secure ACS for IOS-XR and I want help from experts out there. I want to globally deny if someone could remove the whole bundle(e.g: no interface Bundle-Ether10) but can do both of the following on the dot interfaces only:...

What are the differences when configuring Radius with ISE between defining a "radius token" or "external radius server"?

For the light data distribution feature, in the docs it says it spreads it to PSNs in the distribution via the messaging system. I'm assuming this is spread to ALL PSNs in the deployment? Or only to the other PSNs in the node group? It sounds like AL...

Hi Guys,I am planning to migrate my old ISE running in my old server to a new ISE 2.7 that will be running in the new SNS server. Both old and new ISE are running in HA.What I planned so far are;1. Configure temp IP address to the ISE 2.7 and form th...

Hi I believe we're observing a bug behavior with one of our applications that uses Cisco ISE REST API.Can anyone from Cisco confirm the following? We try to query API to get a list of Endpoints using the following filter:filter=groupId.EQ.<id>&filter...

I currently have the following ACL.  I am unable to ping any server at any external/public IP.  I am not sure why.How would I go about fixing this?  Thank you very much! access-list outside_access_in extended deny ip 51.222.38.0 255.255.255.0 any4acc...

working on a ISE migration from 2.3 to 2.7 p1   virtual environment where i did a full backup and restore to the new virtual servers...no issues reported with restore....working to test AAA on a couple switches before migrating the entire environment...

Hi All,Please confirm my thought process for migrating ACS 5.x over to an existing 2.4 patch 9 ISE deployment.Using SNS 3655-K9 appliances.Downgrade SNS-3655-K9 as its shipped with ISE ver 2.6Use ise-2.4.0.357.SPA.x86_64_SNS-36x5_APPLIANCE_ONLY.isoIn...