Network Access Control

I have a customer that is using a hotspot portal as a message for blacklist devices.  It basically tells them that their device has been blacklisted and to call support at xxx-xxx-xxxx to fix the issue.  The reason we are using the hotspot as a messa...

Hi Team,    1. What is the Passive ID limit for number of supported Active Directories?  Does 50 DC/ forest limit apply to here?   2. Is there any way to strip the domain name using Passive ID service?   Thank You!   Best regards, Gyorgy

Hi Cisco Community! I have a silly question.  I'm looking to configure an ACL to allow 10.0.1.43 to ONLY be able to communicate with 10.0.254.52 via any protocol but no other machines or internet. The machines are part of the same broadcoast domain b...

Is it possible or recommended to have the deployment shown below; Node 1 - Running Admin+MnT (Primary)+PSN - SNS3595 Node 2 - Running Admin+MnT (Secondary)+PSN - SNS3595 Node 3 - PSN - SNS3515 Node 4 - PSN - SNS3515 How many endpoints would suc...

Hello team. Looking for some insight regarding the port range available for the ISE Guest portal.Today, using the portal setting UI in ISE the available port domain is 8000-8999.What is the reasoning behind this limitation? Or, asked a differently. ...

Where do you define the "Virtual Network" that is associated with the Security Group shown in the policy results configuration? 

hi, We are using 2.4 patch 9 ISE version, We have created various MAB group to allow the non dot1x supported devices. and also we have migrated the sites to closed mode.  Currently we observe few endpoints which are added to the MAB group are getting...

Do ISE 2.6 supports crowd stike v5 for NAC posturing condition like latest definition installed or not.

Hi,I have a question regarding Rest API on ISE 2.4.Is there any way to get all SXP static binding with additional information like IP. It would help to mange/deleting bindings.For SXP we get in response only 'sxplocalbindings id'.GET /ers/config/sxpl...

I have a customer with the following requirements. Can someone help to see if I'm doing it right?Authenticate windows clients via MAC address only (MAB).Posture check (Anti-virus definitions) via Anyconnect. Would like to check if below is the correc...

I am helping my customer navigate through what is needed to migrate off of their ISE Physical Appliances and onto Virtual Appliances.   TAC/Licensing stated that the customer needs to purchase two R-ISE-VMS-K9 virtual machine licenses because “there ...

For posture check using Cisco NAC Web Agent. I usually encounter the below error on Firefox, Chrome, Microsoft Edge.To continue, install and enable the latest Java version, and make sure the Java plug-in is not blocked. You can download and install J...

HiI have seen this a few times in ISE 2.2 and 2.3 in my Guest Portal - does anyone know what could be causing this? My customer is seeing it more often than I have (in the lab) and in my experience I thought it had something to do with the amount of ...

Hi all,my customer has two data-centers to host ISE nodes as the following :- PAN node in primary DC and another PAN in Secondary DC.- MnT node in primary DC and another MnT in Secondary DC.- some PSNs behind primary load balancer in the primary DC a...

I want to send all logs regarding Administrator logins, and what changes they have made, to a remote log server.If I choose category "Administrative and Operational Audit" I get way too much information.When an administrator is logged in and clicks o...