Hello Everyone, We are working on an ISE deployment with 2 PAN/MNT nodes (located in the cloud) and 5 PSNs located across different physical sites. We are searching for a way to enhance the detection of a failing PSN onsite by the switches to switch ...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hi,After upgrading Cisco Secure Endpoint from 7.5.5 to 8.1.7, ISE Posture didn't recognize Cisco Secure Endpoint 8.1.7 under the Anti-Malware condition, which caused the scan to fail.I've noticed that Secure Endpoint 8.1.7 has become part of the Secu...
I wanted to double check if this is feasible. ISE cluster running 3.1, all physical appliances in large deployment model. We want to move half the physical appliances (phase 1) to virtual. My thinking of best approach is to: 1. deregister the seconda...
Hi!We have Cisco ISE 2 Node and we have SNS3515-K9. We are using it for our Wireless 802.1x. We had plus licenses but they expired couple of years ago as we never needed them after that and we didnt renewed them.We just do wireless 802.1x and now we ...
Dear Community,We currently utilize Cisco ISE 2.4 for TACACS implementation to authorize user access to network devices. We are encountering a challenge during the migration process from a Cisco C3900 router to a new Router C8300 while maintaining th...
Hello Is there a best practice around handling Cisco FlexConnect APs and their switchport configuration when doing profiling? Flex APs require commands relating to trunking and native VLAN etc. - which is different to the usual port template that ...
Hi all;Consider you want to login to your ISE in CLI mode and your "Admin" password has expired. ISE provides you with password changing procedure and you successfully change your password. As I know, there is no "write memory" or "copy running-confi...
Resolved! ISE DACL bi-directional setting
I have a DACL being applied allowing 445 access to an internal resource. Is there a way to allow the internal resource reverse access so it can access the restricted device on 445 as well?
Hi,We are getting "parsing vsa:not a cisco vendor id:311 – radius" error logs from Nexus. What is the impact of this log?
Resolved! Read Only Web Access to ISE Nodes
Hi All,How can we create a Read Only account for web access of Cisco ISE nodes ? I created a new username with 'user' role but not able to login into admin web page.Thanks & Regards,Mujeeb
Resolved! Work Centers - Identities- Endpoints
Hi, one question in ISE please once device MAC address for endpoint is learned by ISE and place Work Centers - Identities- Endpoints , it will stay there permanent or it will be purge out lets say if endpoint not detected on the network for particula...
Hi!We are using ISE to authenticate computers connecting to our LAN using EAP-TLS and share those authenticated identities over PxGrid with 3rd party products.The problem we are hitting is PxGrid shares those identities as user identities and not as ...
Resolved! Intune MDM Attributes missing
Hi,we are currently facing the following issue running a Cisco ISE 3.2 Patch 2:We have 2 MDM Integrations, Intune and JAMF set up - both working with APIv3 and successful connection tests, querying multiple MDMs is enabled in General MDM settings.We ...
Resolved! ISE profiling rule certainty factor
Hi,Running ISE 2.7 with patch 6 (don't ask, we'll be upgrading in the next 12 months) and struggling to understand an issue with profiling rules and certainty factors.I have created a profiling policy that has a MCF of 500. My policy is made up of f...
Hi;Consider the following scenario:ISE 3.2 Patch 4Cisco vWLC 8.10.190.0Windows 10 with Google Chrome 119A user reports their device as 'Stolen' in the 'My Device Portal' and then connects the same device to the network. Based on the following authori...
