Network Access Control

Hello everyone,I'm in the process of testing ISE on a switch that is currently in production.  I had a phone and laptop connected to a port and configured that port only for AAA.  The rest of the switch is bootstrapped with all required AAA/RADIUS co...

Looking to migrate from ACS 5.8 to ISE.   We have several contractors hitting a ASA VPN that point to ACS, we are also using DUO for contractor VPN users.  We currently use the “User change password (UCP) utility in ACS.   This functionality is not c...

Hello, A customer asked us to monitor some specifics elements on their ISE.Despite a quick read of api documentation , i'm not sure that all information asked are available through the API. The elements who were asked to monitor are : - number of ses...

I need to connect some specific devices in my network and need to authenticate these devices through the ISE. I have already configured dynamic profiling and all but the issue is that, the end device has two NIC cards on it and need to connect both t...

I am following the code from https://github.com/cisco-pxgrid/pxgrid-rest-ws and so far I am able to activate my python pxGrid client. However even after shown "Connected" at the client level the client still shows offline on ISE. Also my pxGrid shows...

Hello all great gurus of ISE. I am currently testing a 2.4 build using 802.1x and windows 10 clients. I am using the AnyConnect NAM and posture agents and everything looked like it was running smooth until my customer tried to connect to the network ...

Hello,We are implementing ISE PIC - Stealthwatch integration via pxGrid.One of the requests is to create ISE PIC user with certain permissions to use DCOM and WMI root access, as depicted in a great instructions on the link.Customer want to know whic...

Hi team,   Customer is running ACS and wants to migrate from physical ACS server to virtual ACS software (hardware can't handle authentications anymore).    I've shared that it is EoS, ISE is a better, supported, option etc but customer has somehow g...

How is everyone else doing profiling of MAB devices without allowing complete access? Is it mainly via just dhcp and snmp probes? I did some test and seems that device-sensor via radius probe is completely useless as it requires authentication to suc...

I am going through some strange issue on ISE 2.2. I have some special kind of monitors in my network. On this monitors, i have two NIC cards for two separate operation. I need to connect each NIC with the separate switch port. In short ,i need two se...

Hi,   Now that we have 3695 appliances, we can create a large deployment of 50.000 with only 2x 3695. Is this the best practice for a customer with 40.000 endpoints. Or would you advise to split the persona's and use 6x 3655  (Admin, MNT, PSN) ? Redu...

We are migrating from 2.1 to 2.4 or 2.6 because of some bugs TAC has identified.  we have 4 3495s which do not support anything past 2.4. we need to purchase 4 new SNS appliances.  2.4 is not currently supported on the 3655.  Does Cisco recommend we ...

Team, I have a few questions regarding setting up Posture remediation actions in ISE:   Is ISE able to automatically install a missing file to a directory different than the "My Documents" directory? Default behavior is to prompt the user to install ...

Just wanted to confirm, I don't need to have an AP connected to a dot1x switchport in order for wireless dot1x authentication to work with ISE correct? It's purely up to the WLC and there is no interaction whether the port where the AP is plugged int...

Hi,We are planning to migrate from ISE 2.2 that running on 3495 which is really slow, yes, we did worked with TAC on many SR to get it to response faster without luck(100K endpoints), that is why we are migrating to 3595 that we already purchased(bef...