Network Access Control

Resolved! Endpoints in pending state post posture check

Hi Experts,SetupAnyConnect 4.7.04056 with compliance module 4.3.838.6145.We have started a pilot test posture via AnyConnect for the users on one floor, since the deployment we are seeing that endpoints are getting stuck in pending state.Even when An...

Resolved! ISE compatibility with HP switches and Fortinet AP

Hello guys, I am unable to find much info about below devices in ISE 2.6 network compatibility guide so seeking suggestions here: Switches HP 2530,HP 2626,HP 3400CL,HP Aruba 5412,HP 2510Wireless: Fortinet Access Point Please advise if the devic...

Resolved! Cisco Prime Access Registrar REST API

Hi Folks,I have an installation of CPAR. I need to provision it with REST, however, I am struggling with the documentation. I can send a curl as follows:C:\Users\MyPC>curl "http://<ip>:8080/RESTAPI/service/getobject?typeid=16" -H 'Cluster:'Cluster is...

Cisco ACS 4.2 csv for set static ip address.

I am add user (evgeny) to the ACS4.2 via RDBMS with a .csv file. 1,0,79-041-071,Default Group,100,,testpass,,,15/26/2019 00:00,0,,,0How can I simultaneously add static ip address and other option separate (CHAP/MS-CHAP/ARAP).Have anyone maybe a samp...

AAA Console - Prevent lockout

Hello Team,I have a Cisco Nexus 5k switch. Currently I have AAA configuration as below :aaa group server tacacs+ ACS_Serveraaa authentication login default group ACS_Server localaaa authentication login console localaaa authorization config-commands ...

802.1x workstations keep going to guest vlan

any ideas why workstations keep going into guest vlan? what are your workarounds? current config: interface GigabitEthernetX/Xdescription xxxxswitchportswitchport access vlan 22switchport mode accessswitchport voice vlan 26authentication event serve...

Resolved! ISE dual SSID BYOD with Apple CNA

Hi Is it possible to use the BYOD Apple Mini Browser flow with dual SSID BYOD differentiated portal set up documented by Hosuk Won in the (great) prescriptive deployment guide here:https://community.cisco.com/t5/security-documents/cisco-ise-byod-pres...

Resolved! ISE 2.4 PEAP with EAP-TLS, Win10 VM authc failure

Hello, We are using virtual ISE 2.4 patch 9 on VMWare. We also have a windows 2012 server as the DC on CA server. We are trying to authenticate a vm Win10 that is directly connected to a cisco 3850 switch. It works with PEAP/MSCHAPv2, EAP-FAST but...

ISE node registration fails

I have a problem with registering a new ISE node to an existing ISE cluster that contains 4 nodes, so I have 4 nodes and I need to add 2 more nodes to them, all nodes are running version 2.4 patch10 and the certificates are trusted, however, I get th...

Resolved! ISE ERS API - RBAC

Hello Team. My customer is looking at consuming the ERS Api for specific uses and has enquired whether it is possible to restrict access to a limited subset of API? In reviewing the documentation, it seems that once an account is created for API acc...

ISE ERS - API Usage Logging

Hello Team. is it possible to log ERS API calls? e.g. report/audit API calls; determine what account and APIs have been used/called and when? thanks, Regan

Cisco ISE - Anyconnect

Hi , I want to upgrade my ISE version (SNS-3415-K9) from 2.2 to 2.3.0.298. I want to know comparability of Anyconnect SMC & Compliance module versions.. I just check in site and i understand that .. AC SMC Vr. 4.7.04056 & AC Compliance Module Vr. 4...

ISE setup in a Test Environment with Production IP

Hello All,So we have a scenario, where we are supposed to initialize ISE setup in Test environment with production IP address and then ship it for Customer's Production environment. I have heard about NTP sync failure after this process.Logically thi...

Resolved! ISE 2.6 patch 3. Application patch installation failed; Server=ISE_node_1; Message=Patch 3 install timed out on node: ISE_node_2

I have a two node deployments, Primary Admin/MNT/PSN and Secondary Admin/MNT/PSN running ISE version 2.6 patch 2. This morning when I attempted to patch them with patch 3. I see this message in console: Application patch installation failed; Server=I...

ISE_CONNECTION_RESULT_FAIL_HOST_REJECTS_BULKDOWNLOAD_HOSTNAME_QUERY

Hi All,I'm facing an issue when trying to register FMC with ISE. " ISE_CONNECTION_RESULT_FAIL_HOST_REJECTS_BULKDOWNLOAD_HOSTNAME_QUERY" below is the error log Primary host:test: ISE connection.Preparing ISE Connection objects...Connecting to ISE serv...

Network Access Control

Forum Posts

Resolved! Endpoints in pending state post posture check

Resolved! ISE compatibility with HP switches and Fortinet AP

Resolved! Cisco Prime Access Registrar REST API

Cisco ACS 4.2 csv for set static ip address.

AAA Console - Prevent lockout

802.1x workstations keep going to guest vlan

Resolved! ISE dual SSID BYOD with Apple CNA

Resolved! ISE 2.4 PEAP with EAP-TLS, Win10 VM authc failure

ISE node registration fails

Resolved! ISE ERS API - RBAC

ISE ERS - API Usage Logging

Cisco ISE - Anyconnect

ISE setup in a Test Environment with Production IP

Resolved! ISE 2.6 patch 3. Application patch installation failed; Server=ISE_node_1; Message=Patch 3 install timed out on node: ISE_node_2

ISE_CONNECTION_RESULT_FAIL_HOST_REJECTS_BULKDOWNLOAD_HOSTNAME_QUERY

Cisco ISE Command Cheat Sheet

I have a question regarding the deployment of the ISE-PIC agent. Is it

Necesito configurar un portal de invitados "hibrido" en ISE 2.7

ISE Accept certificates without validating purpose will break 802.1AR

Cisco ISE JSON SMS

ISE Netscaler Loadbalancing Cross-Service Persistence

How to extract Radius Accounting data/log from Cisco ISE 3.3

ISE HA-Mode (Control Webgui)

Cisc ISE Virtual appliance

ISE certificates