Resolved! Captive Portal on macOS for CPP
ISE 2.3 patch 5macOS high sierra (10.13.6) Is captive portal supported on macOS for the byod CPP to do temporal agent posture check?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hello, Can you create an odbc connection to the view database from Cisco ACS 5.6 running on a virtual appliance?We want to use the logged data to create our own dashboards. Thank you for your reply.
Resolved! Push multiple attributes to SQL via ODBC
We are looking for a way to pass multiple RADIUS attributes to an external ODBC (SQL) server for authentication / authorization. As of right now, we are only able to send the username which greatly limits our ability to properly query the SQL databa...
Hello, We have a use case where users should be authenticated by username-password/certificates both simultaneously for Windows/Mac. Is this possible? Thanks, Rakesh Kumar
How would we configure ACS to get that Radius User Attribute from RSA and associated that to a role in ACS. Example:I would have an account in RSA and request access to ACS. Oracle Identity Manager assigns the User attribute to my account in RSA.I lo...
Guys, We suddenly have issue with our authentication, on live logs we always get 24403 user authentication against active directory failed , BUT as per checking in External Identity Source we able to do Test User and SUCCESS Anyone have encount...
Resolved! ISE Aruba integration issues
The integration of ISE with Aruba is being carried out. ISE is in version 2.2 and is being integrated with an IAP that is in 8.5 The configuration was done by guiding us with the following document, where each step is explained well.https://www.cisco...
Hi everyone. First a small background. My customer needs to run some Acceptance Test Protocols, which includes the complete deletion of a VM (which runs a ISE PSN), and restore it from scratch. We use one of the ovf files to create the VM, and we ne...
Resolved! Cisco ISE and Meraki
Is anyone running Meraki Wireless and using dACLs for their users based on SSID membership or AD group membership? I assume this is possible..I found an article on posturing with Meraki.
Resolved! ISE communication with Domain controller
Deployment Type 1:We have two sites interconnected by WAN solution. Site A: One server ISE for all node (PSN, PAN, Mntg) with a domain controller Site B : One server ISE for all node (PSN, PAN, Mntg) With a RODC (read only domain controller). This RO...
Resolved! ISE Evaluation License
Hello friends.Few months ago, I carried out ISE two node deployment and Configured several policies as we were going to get licensed version.Purpose was testing and learning. I almost configured all of things I wanted. Yesterday, I signed in ISE and ...
Resolved! ISE 2.4 Licensing Clarification
I currently have profiling groups to profile devices, say Computers, Scanners, and Phones. These groups have Identity Groups which were created with a parent group of Profiled. They are also a member of a Logical Profile called All Devices. After a ...
Folks, Customer wants to check if a MAC Address exists in SCCM for an 802.1x authentication. This works for MAB but this is not a MAB request. This post says no, it is not supported: https://cisco-marketing.hosted.jivesoftware.com/message/248720 That...
Hello Guys, I have a couple of WS-C4507R+E running in VSS mode, and I'm trying to upgrade the license for the standby peer, and I'm trying to find the best procedure to do this with the minimum service interruption.My plan is to do a vss switchover r...
Resolved! H3C SWITCH stuck in COA
Hi experts, My customer gave me another challenge, to replace all cisco NAD to H3C. Here is their request, do the posture check, if the PC is no compliant, put them to VLAN 60, then put them to VLAN 20 after their PC compliant. Everything is OK ...
