Network Access Control

My customer is migrating from Active Directory 2003 servers to AD 2012 servers.They have the 2003 and 2012 servers running in parallel.I need to point my ISE's at just the new 2012 servers to ensure everything works ok. How can I do this?At present I...

hi fellows  can anyone tell me if ise can get some attribute to place nad inside some Identity group automatically?i have ten different cisco switches  models in my campus , and i want to create different policies based on switch model, but automatic...

Hi All , I am facing some strange issue , some of my end-point are authenticated successfully , showing complaints also  but not getting IP Address . Please advise .  Regards ,

I need to verify for a customer that the Database that is being used by ISE is Oracle and what version of Oracle.   Any assistance on this topic would be appreciated.   Thanks, Kevin

Hi! 1. I would like to know if the SKUs in the ISE Ordering Guide (March 2019) are supported by the SNS 3400 series appliances.   Specifically these: L-ISE-BSE-P6, L-ISE-PLS-3Y-S6, and L-ISE-APX-S-5K=   2. The latest ordering guide has licenses that ...

Hi all,I am about to undertake an ISE upgrade for a customer to take their distributed deployment from 2.2 to 2.4. We have opted to do an inline upgrade as opposed to a parallel due to the extra VM resources that would be required to do the parallel ...

Dear Community,   We are doing a MAB POC as we speak to enhance our level of port security for exotic non-dot1x devices. Our testdevice is a IE3000 8p industrial switch with Version 15.2(2)E4 (preferred IOS version for communication with ISE 2.2). Wh...

The following alert is output to Misconfigured NAS.-------The Message-Authenticator RADIUS attribute is invalid. This maybe because of mismatched Shared Secrets.Check whether the Shared Secrets on the AAA Client and ISE Server, match. Ensure that the...

Hi,   Wanted to understand the following related to the ISE dashboard:   1. What does total endpoint imply? How can we segregate endpoint within this total endpoints( based on endpoint device type). I understand the licence consumption is based on Ac...

Hi,I have five different locations for one of the client.Each location is having 2 to 3 network device.I want to give local site administrator the privilege to change their local device config only.Also, one superadmin should be able to change the co...

Hi Guys, We are planning to deploy two ISE servers with sponsor portal and BYOD.My question is how the sponsor portal and mydevices portal should work.Can this configuration be achieved without using any load balancer for DNS? Also how should I confi...

Hi All, As Meraki MS series switches does not support named ACL being pushed from ISE, we are using Call Home List feature in ISE to configure posture. The posture is happening completely and the endpoint is being allowed access to the network. In ou...

I was going over the following two communities guide:https://communities.cisco.com/message/276046#276046https://community.cisco.com/t5/security-documents/guest-hotspot-with-max-2-hours-network-access-per-day/tac-p/3891027#M6430I have some questions:1...