Network Access Control

HI I am looking for documentation for certificate based authentication on Cisco ASR where the CA is a Microsoft based deployment. Can someone please tell me how this is done or provide a link to a document for the same? The basic idea is to use EAP-T...

Hi Experts,I am integrating the Juniper 2200EX running JunOS 15.1r with ISE ver 2.6While the authentication via dot1x goes well and the endpoint gets the IP address. The final access is just permit access in authz profile.When I try to take a remote ...

Hi all Can someone answer the question how many Active Directory domains can be handled with one instance of an ISE-PIC? The number I found is up to 100 domain controllers are supported (via a client or WMI), but are these DCs from one domain or mult...

Hi , I am trying to make ISE's self signed certificate to be trusted by my computer for admin access and for portal redirection ( same certificate ) . I extracted the cert (.pem) and then I renamed it with extension .cer in order to be executed by my...

Hello, although not strictly an ISE issue, a customer has changed the UPN for a few Active Directory users.For example, FROM- FirstnameLastName@customer.com TO - Firstname.LastName@customer.com. This is not being reflect in the new certificate which ...

Hello Runing a ISE 2.6 patch 4.  In the red text below  i have alot of content that is geting skipped, and warning that admin changed a policies or a profil. My real issue is that HP Printers that are new are not geting identified. is there away to f...

Hello All, I was wondering if it is possible to use ISE (Version 2.4) to dynamically assign VLANs for wireless access points when they are plugged into a switchport. Our organization requires AP's to be on a separate VLAN from the user VLAN. And if s...

Hi experts,Please help me develop my understanding of the Internal CA feature and the required license.I have a customer who has deployed ISE with 1000 Base license, for example. Now they want to utilize this for their new VPN infrastructure. The num...

Hi ,I am trying to build a policy to authenticate both Machine's MAC + The user should be a member of a special group in AD .  I AM NOT USING 802.1X in my setup . My NAD is an ASA .the user authentication is already done , I just want to know how to ...

Hello Experts,I would like to extract reports based on the TLS version being used by the endpoints, as seen here:But, was not able to locate such a filter on ISE Reporting, any pointers to the same?Or is this something that cannot be extracted from I...