Network Access Control

Hello all , We have changed the EAP certificate with a wildcard . Since then from windows supplicant we are getting the below error :  "EAP Root cause String: The authentication failed because the certificate on the servercomputer does not have a ser...

We are using Cisco ISE to do EAP-TLS authentication from a 3rd party solution. The vendor's documentation states "The NAS ID will be sent in the RADIUS NAS-Identifier attribute of the Access-Request. The RADIUS server uses it to identify this Mobilit...

Packet Tracer 7.2 wants e-mail and password informations every time I start it in Windows 10. How to get rid of this?

Dear community,   It seems FORTINAC can integrate with all of cisco switches even with our legacy ones like C2950, C4500/SUPII etc... While we dont. I would assume dot1x not being supported on these so DOT1x and Radius/COA are not supported. at the s...

Hi AllI have an issue in adding the ISE on VMware to the Cisco Support (Smartnet).They don't recognize the virtual SN.Dose anyone know how to fix?

What protocols are supported for repository URLs? sftp:// is supportedscp:// is not supported (CSCvh78921).

Hi Experts,   My customer is looking at purchasing new servers for ISE licenses and are looking at either one of these options below. They would like to know if they can retain their current 10,000 ISE Base license and move these across to these new ...

Hello,I am facing a situation at new work place.We have ISE 2.2 deployment with two nodes.A wildcard certificate signed by an external CA is present on secondary ISE, which is used for authentication, but there is no such certificate on primary node....

Hi Experts,Since WLC 8.0 it starts to support HTTPS redirection for CWA, post WLC v8.0 the HTTPS redirect is supported but there are concerns about WLC performance by handling large amount of SSL traffic.  As a result , the ISE Guest CWA redirection ...

I know this is relatively a "dumb" question, but just wanted to be sure because someone put doubt in my head. Actually, two questions to ensure absolute clarity.1. Will Cisco ISE ONLY work with AnyConnect, specifically for the posture and other modul...

I have a customer who is creating DACLs going beyond 100 IPs.I have never encountered such use case but just wanted to get confirmation if this is recommended or not recommended due to TCAM utilization issues.Also what is the best recommended DACL si...

I was asked about the options to expand a Basic 2-Node Distributed ISE Deployment and if simply adding a tertiary (3rd) node to the deployment was an officially supported design.  So from an "official" deployment perspective they would be moving from...

Hi team,   Customer, a large bank, is preparing to upgrade his 12-node SNS3595 deployment from 2.2 to 2.6 with our partner and they want to test out the upgrade process in their pre-production VM environment.   They want to backup/restore the product...

Hello team, I purchased two Cisco SNS-3615 for my end customer and in the BOM I have this option "SW-36X5-ISE-K9(Cisco ISE Software Load on SNS-36x5-K9 appliance) and want to confirm if the software is already loaded on the appliance or I have to dow...

Hi, We are using version 2.2 with latest patch in distributed deployment. We want to use max sessions feature but I am not sure about some tuning. After unchecking the unlimited session and setting a maximum of 3 sessions per user, in addition to if ...