Hello. I have a customer running very old TACACS 4.9x on Windows 2000. They are looking to migrate this to ISE. All of the users/groups are on the 4.9, not in AD. I assume there will not be an easy way to import this info into ISE. If they are ...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! SAML End User Auth/
Can SAML be used for end user authentication/authorization?
Hi Experts Customer would like to utilise ISE Guest Self Registration with Aruba Wireless controller They currently have Aruba AP345 AP's and controllers 7210 / 7240 running code 8.3.0.7 They already have ISE 2.4 Is there a documented guide for s...
How does the reauthentication works for a MAB devices, once the intf reaches the end of the reauth timer, let's say, after 180min?With 1X, the switch will send EAPoL request to the endpoint. But how does the switch proceed for a MAB device? In an I...
Resolved! Anyconnect posture module
HI,I would like to deploy an Anyconnect posture module with SCCM software distribution. How do i push the posture profile or the config of the posture module?We can push the software through SCCM and a xml file , however what kind of configuration i ...
Hello. I have a customer that has a centralized HA ISE deployment. They also have another seperate ISE deployment in another part of the network. They would like to change this to one distributed deployment. Is there a guide that details how this can...
Resolved! Cisco ISE Patches
Hi, Is it required to install every patch version or we can install just a certain patch version?For example, we'll just install patch 1,3,5,7 rather install every patch version.I'm using ISE 2.4
Resolved! Cisco stealthwatch and ISE
Dear community, I am confused with the Cisco ISE and stealthwatch. It is clear to me what is Cisco ISE, but looks like stealthwatch is the ISE management console. Can you explain also If I can implement Cisco ISE only without stealthwatch ? Thanks,E...
Resolved! Okta Radius Attributes
Hello team, Have a use case where enterprise is moving from AD to Okta UD and is currently using ISE. From my understanding Okta Radius supports generic Radius attributes but we would like to have a full suite of attributes so that we can continue ...
I have a list of Cisco configurations (see picture of excel sheet) to check whether they're enabled or disabled or set to my companies security standard. I have been trying to compile a show command "script" to run on any device in the company at any...
Resolved! ISE and CDP device sensor
Hi, all.Anyone can explain to me, how the CDP device sensor probe works with ISE ???What I am trying to do, is to identify different Cisco Wireless Access Point models (i.e. LAP 1142) with ISE.Since the APs do speak CDP (I can see the AP devices on t...
I have this challenge where customer has two separate domains, ISE has been added to both of them and importing users etc from both domains works fine. ISE version is 2.0.0.306. Both domains have separate Windows CA servers, how does this work with E...
Resolved! ISE integration with Azure AD via RADIUS
Can ISE integrate with Azure AD via RADIUS? Is it supported, has it been tested, any caveats, or how to guides? I see it has been tested with SAML and that there is a guide, how about RADIUS with Azure AD? https://community.cisco.com/t5/identity-se...
Hi Team, Working on regex for TACACS policy command sets, having a query in command sets, needs configuration as below: Below command sets should not be changed on global level: conf t (config)#address-family ipv4 unicast config-af)#maximum prefix ...
Resolved! Cisco ISE Pre and Post Posture
Hi All , we have cisco ISE 2.4 , Distributed deployment with Wired , Wireless and VPN. currently we have Pre-Posture configuration ( i.e. we have to enable http server on Cisco Switches for redirect ) . can we move to Post-posture configuration ? ...
