Resolved! Cisco ISE - Posture
Hi, is there a way to get Hardware properties "Serial Number" with anyconnect agent?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
e currently run the FMC 4500 and FTD 9300's, and am currently working on a new Access Control Rule, however I don't know that it is possible to create a dependency. Let me explain. We have a particular service that listens on 80 and 443. I only wan...
I am implementing a new Cisco ISE. It is using the Smart Licensing model and I just registered connecting to Internet. The VM Small license is being used (ok), and in the Base license it only shows Enabled as status. Is there a way to check how many ...
Hi Guys, I'm having issues authenticating (TACACS+ w/AD) to my routers when I set the device type to "routers". When I try logging in, my prompt gives me access denied. ISE gives the below error: When I set device type to "All Device Types", I'm able...
What is the difference between an ISE normalized radius attribute vs an ISE radius attribute?
I have been trying to study Cisco ISE for quite sometime.I have come to a observation that only specific RADIUS attributes are being used in authentication and authorization policies in multiple use cases.They are Normalised Radius·RadiusFlowTypeNorm...
Hi AllI'm trying to setup Guest Self Registration Portal. I wanted to have the WLC Radius Requests handled by a PSN in the Secure Zone while the Portal redirection goes to another PSN in the DMZ.As a result ISE throws a “400 Bad Request” to the clien...
Resolved! Switch ACL vs dACL
I am trying to rollout device profiling through ISE 2.4 for our enterprise small branch offices. In the past we have been using extended ACLs on the switch SVI to manage access. The introduction of ISE profiling seems appealing, but I am unsure about...
Hi All, I've tried to import the endpoint to my ISE from the CSV file and got the problem that I cannot import the file with have more than 10 row with the error in attached.My ISE is version 2.3.0.298 patch 6.Anyone have experience like this and how...
I am trying to get Windows NPS Radius to authenticate users into switches and routers. I have followed a very thorough document that I found online. However, I am not having success getting authentication to work. Has anyone had any success with i...
Hello Team, Customer wants to integrate ISE with external radius server rather than AD directly. However they also need to implement TACACS features. So my understanding is .... user ------> ISE server -----> external radius server (microsoft NPS...
Resolved! Two redirection URLs are being pushed
Setup is ISE 2.6.0.156Switch 2960 Lanbase IOS 15.0(2)SE11Windows 10AnyConnect version 4.7.04056While testing I saw that there are two different redirection URLs being pushed, I see the same thing in live logs and on the authentication session that is...
Resolved! enroll.cisco.com how to use it..?
Lately I have been going through posture configuration at my end and see the requirement to resolve to enroll.cisco.com.As per my understanding it means that it should be resolved from my DNS server, right?But, when is plainly do a ping enroll.cisco....
Resolved! Posture or VPN support for Linux
Hi Experts,Since AnyConnect is available for Linux, I am planning to use to posture some of the linux endpoints.But, ISE posture configuration does not list of posture conditions for Linux, the same way there are for MacOS and Windows?Is there some m...
When ISE received the Machine-PAC, does it check with AD that this workstation is still authorized on the network? I got this question today:When EAP-FAST with EAP-Chaining is used, ISE sends a Machine-PAC following a successfully machine AuthC. Let'...
