Network Access Control

Hi, We will be migrating our VPN solution to Anyconnect from GlobalProtect.  I just wanted to check what licenses do we need on the ASA headends(possibly 3 headnends) and ISE.  Here are the some of the things that we will be enabling for the infrastr...

Hi,I have a ISE Use Case Employees uses corporate asset (laptop) to access enterprise network from wired network when they are on their desks and connect using the wireless network when they are in the meeting room.  The issue is, AnyConnect Network ...

I'm having a hard time finding an answer, but is it possible, given appropriate logging settings for ISE, to retrieve all devices detected by ISE including their posture, timestamp, and other device details like MAC Address, IP, OS type, etc...? Seem...

Hello experts, I have a doubt regarding the Certainty factor on ISE.Let's suppose we have a default profiling rule which is Canon Device with one condition matching the Canon OUI and CF = 10 (Minimum CF = 10)1st question : Now if I create a custom pr...

Hello    Trying to do some device profiling for a wired 802.1X deployment.   No matter what I try, I cannot see  Device Sensor data in the RADIUS accounting.  Is there a magic command that I have forgotten?  It works so easily on Cisco WLC's - but tr...

Hey All,I have fabric network where ISE is Policy enforcer not DNAC. I have more than 150 SGACL in ISE and pushed. When I check the NAD I do not see all of them. What can be reason for this?

We are experiencing an issue which affects some endpoints after they have been re-profiled. From time to time we see endpoints that have been profiled as a specific type of device (i.e. Windows10-Workstation), get re-profiled as a generic device such...

Hello,   In a hybrid deployment with 3695 as PAN & MnT, a PSN based on the 3655 would support up to 50,000 concurrent sessions, or just 25,000 sessions?   Looking at the ISE PSN Performance table on the ISE Performance & Scale page, for the 3655 appl...

Hi Experts We've received an request from the security ops team to create a new service account for the 'nessus' scanner (with AD integration) in ISE with Read only privileges to scan the ISE devices. Typically, we'll use 'nessus' scanner to scan the...

Dow we have  an option to enable ssh from ISE GUI

Hi,I'm trying to create a  authorization policy using an active directory OU (both user and machine objects).  But I'm unable to the OU to ISE.  It only allow security groups. Please advise.

Can you combine ssh key pair with tacacs user for authentication for routers and firewalls? 

Hi All,    I have a question , and i hope someone can help me with this one.  Currently i have an distributed deployment of 8 ISE nodes (software 2.3 with Patch 1 + 2).  The ISE is joined with an Active directory an all is working.    However:  We ha...

I have set up a pretty wide open policy set for some Juniper firewalls, and it is allowing the authentication in ISE, but the same auth still fails on the Junipers. Any ideas?