Network Access Control

Resolved! VLAN does not change after and endpoint is compliant

Hi Everyone,I have setup a pretty basic policies,A user authenticatesPosture is run in a limited access VLANWhen the endpoint is compliant, VLAN changes to the production VLANPosture runs, AnyConnect reports endpoint as compliant.But, ISE it says tha...

Cross-version restore from 2.3 to 2.6

I have an ISE deployment with 2.3 (no patch). Looking to get to 2.6. Instead of upgrading I am looking at deploying 2 new VMs and then restoring a backup config . Other option would be to patch and upgrade existing VMs. What would be the best/easiest...

ISE and trend micro

Does ISE integrates with end point protection like trend micro ( and the license is apex one) ? if not what does it integrate with meaning which vendor? thank you

Hi, How can I allow this specific command in ISE " username <itpa account name> algorithm-type scrypt secret <itpa clear text password>" .

Hi, How can I allow this specific command in ISE " username <itpa account name> algorithm-type scrypt secret <itpa clear text password>" .If regex is the solution what could be the command and argument.Command : Argument : Appreciate the Help

Resolved! Guest Portal Customization - call outside api

Hello , i am trying to use a java script code at the Guest portal self register page in order to call an external API server using web service to check for mobile no. at another DB . xhttp.open("GET", "http://" + ip + "/api/Search/Mobile/" + mobile,...

Resolved! Introduction to ISE ANC Policy APIs Lab

Hi Cisco Community, I am trying to do the lab in the Cisco DevNet Security titled "Introduction to ISE ANC Policy APIs." I am trying to log into the SDK. I have tried the https://198.18.133.27/admin and https://198.18.133.27:9060/ers/sdk# with no suc...

ISE Wired Supplicant CRL/OCSP Check Issue

I'm hoping someone else may have run across this issue and can help... I have an intermittent issue in which machines that are using wired dot1x fail to authenticate properly after being rebooted. We opened a ticket with Microsoft, as the supplicant ...

Export of ISE operational data

What options are available in ISE to export operational data about endpoints to external databases, etc?

ISE TACACS+ Performance Tables and Sizing clarification

Team I have been digging around but still cannot clarify the doubt I have between this 2 tables: From https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148 ISE TACACS+ Performance Platform performance specs are ...

Resolved! ISE Admin Access with multiple external identity stores

Hi, I'm working on a project to cutover our existing ACS to ISE. I'm new to ISE and looking through an eval version of the application. I'm looking for a way to authenticate users to different external identity sources. ISE access requirements:- Ext...

Resolved! pxGrid 1.0/2.0 Questions

We are running ISE 2.4 P11 and have Plus and Apex licenses. We are using external CA but I do not think we have any certificate issue. We also have two (2) dedicated pxGrid personas. How do I know pxGrid is running 1.0 or 2.0. Does ISE 2.4 automa...

Resolved! 802.1x on switch ports with NIC teaming enabled on host

Hi everyone, I currently have NAC enabled on a switch running in monitor-mode (low-impact). I have authentication open and a pre-auth ACL configured on the ports. This pre-auth ACL only allows DHCP and gets overridden by a downloadable ACL from IS...

Resolved! ISE 2.6 - MAB EAP - Detect EAP-MD5 as Host Lookup

Hello All, I'm trying to figure out how to configure MAB EAP with cisco ISE. I fully understand that mab eap has no added value since only the password is "encrypted", and the username still containts the MAC address ,... I know in the past there was...

Resolved! Once authenticated through CWA, want certain AD groups to be DeviceRegistered without using BYOD: How to?

Situation: Open SSID for Guests Sponsored Access. Either guests or Employees can authenticate on CWA. Requirement: Once an AD:IT user is authenticated via CWA, customers wants MAC address of device be automatically added to RegisteredDevices. Goal...

Multihost mode and hub

Hello, I have ISE 2.6 and multi-host mode. I want, if there is a hub in a port of a switch, the users not to be able to have access to the network.Is multi-auth a solution? Is there something I must be careful when changing the modes. What do you s...

Network Access Control

Forum Posts

Resolved! VLAN does not change after and endpoint is compliant

Cross-version restore from 2.3 to 2.6

ISE and trend micro

Hi, How can I allow this specific command in ISE " username <itpa account name> algorithm-type scrypt secret <itpa clear text password>" .

Resolved! Guest Portal Customization - call outside api

Resolved! Introduction to ISE ANC Policy APIs Lab

ISE Wired Supplicant CRL/OCSP Check Issue

Export of ISE operational data

ISE TACACS+ Performance Tables and Sizing clarification

Resolved! ISE Admin Access with multiple external identity stores

Resolved! pxGrid 1.0/2.0 Questions

Resolved! 802.1x on switch ports with NIC teaming enabled on host

Resolved! ISE 2.6 - MAB EAP - Detect EAP-MD5 as Host Lookup

Resolved! Once authenticated through CWA, want certain AD groups to be DeviceRegistered without using BYOD: How to?

Multihost mode and hub

EAP-TLS Device Certificate for Entra Joined Devices with Intune

Posture assessment report never finishing

NetFlow Probe Profiling – Missing IP and Port in ISE Context Visibili

Default Route SGT

PX Grid Connector and Service NOW

ISE Profiling Conflict

Scenario ISE-Pri dead and promote ISE-Sec to Primary

can no longer ssh into the Primary Admin/Secondary MnT node

NTLM Disabled and ISE-PIC

Impact of Resetting ISE Context Visibility on Endpoint Connectivity