Hello all, We have user from a domain ( testdomain.local for example ) connecting wired/wireless and authenticating to ISE with either MSchapV2 or Certificate.MschapV2 is forwarded to an external radius server, PKI is handled off by the ISE itself. I...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi. Do I need to procure licenses and install Cisco Anyconnect to all Windows 10 Computers if I want to do Posturing (make sure AV is up to date, OS patched to latest and so forth)? I don't think I need Anyconnect for Profiling but again just asking....
I need assistance in getting URL redirection for client provisioning to work when my PC is connected behind an IP-Phone.Redirection is working fine when the PC is connected directly to the switch but somehow, redirection is not even attempted when th...
Dear all, A reseller implemented ISE test licenses in a customer network environment, they have now expired. Customer has baught new live licenses from us. Question: Do the test licenses become live licenses or do the reseller have to do the impl...
According to the latest ISE ordering guide https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf, Plus license is not required if user and endpoint contextual attribute is exchanged - "User and...
Hi Experts, Recently I have found lots of info which is a mismatch between ISE VM license and the performance, hope someone can clarify my confusion about this. Thanks very much in advanced! First I have checked the administrator guide for ISE 2....
Hi, How does ISE know that a Windows machine has a particular critical patch installed? I was expecting that ISE had a registry signature under the "Patch management condition" for each new patch released by Microsoft, however, it doesn't. Does ISE r...
Resolved! 10G SFP+ option for SNS3655 appliance
Hello,Since SNS 3655 only offer 10G Base-T connection, is it possible to order a 10G SFP+ card to allow the appliance to take 10G fiber instead?
HiI have been asked to convert a Sponsored guest to a Self-Registration guest service with the same account expiry.Is it possible to migrate Sponsored guests to Self-Registration guests? Or do the current guests just have to start again?Can they use ...
Hi Team, Can anyone help me with few questions regarding the ISE PIC which I couldn't find documentation or reference for the below items1. Whats the scale or capacity of an AD agent? How many Events or Logs Per Second is supported on each AD agent?2...
Good daySuppose i have two device administration policy set rules (Rule-1 and Rule-2), is it possible to create two separate Administrator user groups, with group one having read-write access to rule-1 and no write or read access to rule-2. as well g...
Hi , I am deploying ISE to Posture VPN users ( ASA is the NAD ). I want the users to be authenticated using LDAP ( which is already configured in ISE ) in addition I want the User to receive an OTP via SMS using an external server . Can this be done ...
HI I am looking for documentation for certificate based authentication on Cisco ASR where the CA is a Microsoft based deployment. Can someone please tell me how this is done or provide a link to a document for the same? The basic idea is to use EAP-T...
Hi Experts,I am integrating the Juniper 2200EX running JunOS 15.1r with ISE ver 2.6While the authentication via dot1x goes well and the endpoint gets the IP address. The final access is just permit access in authz profile.When I try to take a remote ...
Hi all Can someone answer the question how many Active Directory domains can be handled with one instance of an ISE-PIC? The number I found is up to 100 domain controllers are supported (via a client or WMI), but are these DCs from one domain or mult...
