Hi all, when integrating ISE with MS Intune, are we using the Intune NAC API at that point like described in here: https://docs.microsoft.com/en-us/intune/network-access-control-integrate I guess we are (otherwise would not make sense), but not 1...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hi Experts, I have a customer who is performing Posture in windows machines. When the posture starts it gives an error that the server is not trusted. We are using a CA signed cert for all the portals. (ISE FQDN in CN) Admin and BYOD portal-only...
Understand 2960 switches are able to perform classification (Cisco TrustSec Security Secure Tag ) For example I have a PCI Server and non-PCI server (same VLAN) connect to same 2960 switch. Is that possible to use Cisco TrustSec on 2960 Switch to...
Resolved! Multiple ISE servers AAA query from WLAN
Hi All, Quick design question. I have a WLAN that right now I send our AAA request to ISE. (ISE version 2.4) and I have two ISE nodes a Primary and a secondary. Would it be good practice to add my secondary node to the second server list on the WLAN....
I am going to open a TAC case on this, but figured I would ask the community. Our standard setup for ISE grants limited access to endpoints that aren't profiled into a profile we are using in a rule or aren't doing Dot1x. The limited access DACL al...
We currently use Wireless AP-WLC-Cisco ACS/ Windows AD model to authenticate corporate wireless users/devices through WLAN. We are planning to retire ACS and replace it with ISE 2.4. During the preliminary test, we found the end devices are promp...
hi, When i shut and restart the port for doing the authentication "There have been 5 repeated authentications with the same authentication result.The authentication details of the first passed attempt is shown here." It gives me this stating its ...
Resolved! PxGrid: Silverpeak or Palo Alto?
Hi team, I realise PxGrid integration depends on whether a vendor chooses to support it but wondered if you've heard, from our side, whether Palo Alto or Silverpeak are looking to get certified and be put on our supported ecosystems partners list? ...
Resolved! Authorization Policy Missing or Different in V2.4 | WorkCenter>TrustSec>Policy>Authorization
Hello Everyone, I am trying to follow Wireless TrustSec Deployment Guide https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-4/b_wireless_trustsec_deployment_guide.html , but I am stuck trying to figure out how to follow the guide....
Hello, I am working to deploy ISE-PIC agent. I installed thes ISE agent on a server 2012 box (non DC) and pointed the agent to a 2012 DC box. When I add the ISE PIC service account to the DC admin group I am able to send ID from DC--->AGENT BOX---->I...
We are currently testing PKI on a device which seems to work successfully. Used the trial for PragmasysInstalled Self-Assigned certificate But what seemed to have broke was it logging the session onto ISE and now our ACAS Scanning failed credential...
Hi, We are using ISE ver 2.4 and we are implementing web authentication for our guest.Their machines are on Windows 10 and as you would know, the latest versions firefox and chrome no longersupport java plugins that's needed for the CoA/DHCP renewal....
Resolved! ISE Upgrade 2.0 > 2.4
Has anyone seen an issue when doing this via the GUI? it fails to download to the secondary unit, even though connectivity is fine? it can see the file in the FTP REPO, just says "download failed" all the time, is it easier to goto 2.1 first do you...
Hi everyone, I'd like to configure a NIC bonding for two gigabit ethernet interfaces (date interfaces, not CIMC). However, I have the following requirements: 1) That the MAC-address be configurable on the SNS. This can be done before ISE installa...
this is a fresh ise installation. the ntp is already configured but when issuing show ntp below is what i can get: configured ntp servers: <ntp ip address> unable to talk to NTP daemon. Is it running? % To Restart NTP do 'no ntp server' followed by '...
