Network Access Control

Hi Folks, We have done an integration of OKTA with ISE using the SAML ID providers External Identity source option.Now we want to create rules based on the groups created on the OKTA Universal directory.We have created 3 groups on OKTA and added user...

Having a thing to make clarification regarding external(AD) admin users for Certificate Portal to create certificate(s) to others. From Portal Settings, I have selected AD as Authentication Search List and then chose a specific AD Group as Authorizat...

Please help me to find the configuration for mail alerts for posture not compliant.ISE 2.6 patch 3 Regards,Venkatesh

Hi all, We are using ISE 2.4. Switch C2960 and PSNs are in node group. Posture Assessment with AnyConnect (AC) is deploying and having following error:   At 28/11/2019, 17h14’               One PC win 7 has problem that posture status is NotApplicabl...

Hello,  I Would like create the script for add the device (PC with Mac address and description). is it possible to create it with powerhsell? Or Python ? If both works, which is the most appropriate?  Thx for your help guys !

Hi Team,   I wanted to confirm if mix/match standalone with distributed deployment is supported. For example is a following 3 node installation supported:  Node 1: PAN (P) + MnT (S) + pxGrid + PSN Node 2: PAN (S) + MnT (P) + pxGrid + PSN Node 3: PSN ...

Hi, please, can you help me to clarify if the SNS-3655 only to support TACACs can support 100,000 NADs or the number of NADs is limited to end points that is 25,000 in standalone mode?   Thanks, Joao Cardana

Hello, I have configured ISE 2.4 to create wifi hotspots and self registration access. We user a WLC 2504 controller software version 8.5. Everything works fine with windows devices and android devices which get correctly redirected to ISE portal pag...

In endpoints list I see a lot of devices which I don't need to be managed by ISE such as IP phones. Even MAC addresses that coming from telecom providers are listed there. Those devices are not even in our network! Devices takes licenses, why should ...

For TACACS license, in the license ordering guide it says that "One ISE Device Administration license is required per Policy Service Node that operates on Device Administration transactions". If I have 2 PSN's that means I will need to purchase 2 x L...

Hi All Our current ISE node is registered as ise.xxx.localIs it possible to use ise.xxx.com as the EAP certificate?  I presently have the .com wildcard cert used for guest and sponsor portal but I don't think it is setup correctly for EAP.  So I want...

Hi All,  In one of the requirements, we would like to restrict personal devices to access corporate networks over 802.1x wired or wireless using MSCHAP. We can add machine authentication on top of it.  Can I simply use EAP-TLS to eliminate machine au...

Dear All, We have a mixed environment of cisco switches and non-cisco (Does not support 802.1x). There is less very feasibility to replace non-cisco switches and need to configure 802.1x and posture services for laptops.  what can be the best solutio...