Network Access Control

I have setup Threat Centric NAC on Cisco ISE. I am trying to test the Threat Centric functionality with the Qualys vulnerability scan. I am using ISE version 2.6. I had no issue registering ISE with Qualys cloud services and I had no issue getting th...

Scenario: I have a MAB policy set where I permit various endpoints with some different profiler policies/logical profiles I’ve defined. Then the last rule is a default deny access. We have a subnet which we allow guests to connect on, and we want the...

I would like to gather opinions/experiences on utilizing authz conditions such as Session: CurrentTime to achieve some sort of time-based restrictions.  I would prefer to use ISE for a small use case where I need to implement time-based restraints fo...

Hey Team, This is the requirement to setup a lab of cico ISE, I have on SNS-3595-K9 ise box with me and i am not sure what other devices i need...please help me what other devices are required to setup a ISE lab. MD

Hello, At one of our customers Domain is implemented using Windows Server 2016 in Core mode (there is no GUI for Domain management, CLI is being used). We are not able to replicate instructions for configuring a user for ISE PIC provided on the link ...

I am trying to come up with some resiliency options in case of a massive ISE failure. I have a critical VLAN setup on all switchports in case ISE is unreachable. My question is how do I deal with switchports that use dynamically assigned VLANs? If IS...

I am running into a situation where I have some WDS PXE endpoints in my environment that are triggering the anomalous behavior flag. Reviewing the logs in ISE shows that the DHCP class-id changes from MSFT 5.0 to PXEClient; I am assuming when they re...

Hello,   Have anyone tried setting up a guest portal FQDN mapped into two different IP address in which these two IP address corresponds to the IP address of PSN nodes?   Let's say for example PSN1: 1.1.1.1 HOSTNAME: psn1ise.company.com   PSN2: 1.1.1...

Hello, We are upgrading an ISE deployment from 2.1 patch 7 to 2.4. Do we need to patch the 2.1 deployment to patch 8 (Latest) prior to upgrading to 2.4 or is 2.1 patch 7 sufficient to upgrade from? Thanks,

hi experts:    My customer plan to purchase new ISE cluster to replace the old ones. Primary authentication is EAP-TLS+DACL. Couple of questions from customer: 1. From the scale guide section ISE 2.4 RADIUS Performance, it mentioned concurrent EAP-TL...

I have a customer asking for integration between ISE and Apple Open Direcory. I did a quick search and it seems that they use OpenLDAP, which is an open-source implementation of LDAP. Has anyone tried and knows if it might work?   Thanks