Network Access Control

Dear all friends and experts.,I have a Cisco ACS 5.8 running for user authentication (802.1x) from external sources ( AD)Now, session client is unlimited, users can access to WIFI network by any devices.What did I do?- Configured group mapping to map...

Hi,Some use cases I need to implement often requires me to implement some kind of java script. I'm fine using the scripts but I'm wary about the added complexity it adds to the environment. ISE is very difficult imo to do an upgrade/patch as I never ...

Hi All,I would like to know the comparison NAC solution between ISE and aruba and forescout .I tested Aruba Clear Pass for my work-group PC authentication with Certificate. In Aruba ClearPass, I need to create local user in clearpass and download thi...

I just bought eight new 3695s to replace my hybrid environment. They shipped with 2.6, but I re-imaged to 2.4 p9. I expect to migrate to this new environment in the next couple months. I have had a change of heart after talking to different people an...

What's the best practice(s) process for migrating 2 existing ISE Standalone HA Nodes to 2 new ISE Standalone HA VM Appliances?  What are the caveats to be aware of?  Licensing, Certs, Etc? 

Hi I created the policy sets for hotspot portal but I am not seeing my endpoint redirecting to the portal. I am being allowed access to the internet. I am running ISE 2.4 p9. I have added the ise fqdn in dns. portal test URL is working. The guest flo...

Hi  I hope you guys have already seens this. I am trying to assign a mac to a group (static assignement) and I get this:Unable to create the endpoint.Endpoint ZZ:ZZ:ZZ:ZZ:ZZ:ZZ already exists  However when I search for the specific MAC address I can'...

Hi Team,   Checking an ISE design for 2 Data Centers, using 2 appliances for PAN and MnT in redundancy and 2 appliances as PSN I would like to confirm if there is any way to avoid Split Brain situation.   For example;  installing one appliance with P...

Cisco WLC Software Version: 8.5.140.0Cisco ISE Version: 2.4.0.357 with Patches 5 & 6Documentation followed: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html#anc12 After following the above d...

Hi, In ISE 2.4, can we send internal user password expiry notification to user, if user mail account and SMTP server is configured appropriately? If yes, is this email text configurable? I can't find any related setting so far.    Best Regards, Kaori

Hello I'm running ISE 2.4 and I'm trying to get NAC via dot1x/radius working.  I have a NX-OS 9K switch in my network devices with correct radius key.  I also have a default policy set to accept dotx wired users and allow them to do anything.  On the...