Network Access Control

I have a python script that I am attempting to use to automate creating or statically assigning an already existing endpoint to an endpoint group.  Essentially I am trying to do this:Prompt user to determine if MAC address is a new host or existing h...

Hi All, I see there are now OVA files on CCO that say they are recommended for VMware 6.5.  ISE-2.4.0.357-6.5OVA-SNS3595-Medium-200GBHD-64GBRAM-16CPU.ova Can anyone please confirm whether these files allow the OVA file to be deployed directly without...

I know that we have integration with Tenable.sc. The question is do we have any future planes to integrate tenaable.io with ISE. 

Customer use case:   We were able to retrieve certificates from our Microsoft Certificate Authority to our ChromeOS devices.  This satisfies one of the conditions to permit a Chrome OS device to access our Cisco ISE wifi access point.   However, we n...

Hello, To prepare an upgrade, I need to delete a certificate (to run URT).ISE Server isn't letting me do it. I got the following error.Thing is when checking Remote Logging Targets I'm not seeing any Secure Syslog Target configured. Regards,Eric

Hi Experts,    This is with reference to the question asked in the following link https://community.cisco.com/t5/identity-services-engine-ise/creation-of-secondary-ip-or-ip-loopback-with-32-on-ise/m-p/3523973#M8886   From what I understand we still c...

I have some devices that are hitting my default (open) rule that I want to hit an earlier rule. The problem is that I am not getting enough attributes from them until I have the profile perform an NMAP scan. But the device has already performed auth ...

Hey guys, Wanting to know if there is anyway in the Dacl syntaxto get host range /24 to work we have a range of hosts, 135 of them that every time we add a new server we have to update the Dacl.what i would like to do is something like this to keep i...

With current configuration setup for ISE and ID-PSK, using Cisco AV Pairs in the Authorization profile to hold the network key - these attributes in the Authorization profile are shown in clear text in the Live log details. The ISE Live Logs are acce...

I have created sub-policy to Microsoft-Workstation that looks for the same attributes, but adds in DHCP host-name. The devices are still getting profiled as Microsoft-Workstation instead of 'SJ-Desktop' even though they clearly meet the host-name cri...

Hello, I am looking at some of the ISE designs and had a question around the following design. If I run two PAN/MnT nodes but run primary PAN/secondary MnT on Node 1 and Primary MnT/secondary PAN on Node 2 is there still a limit of 5 PSNs in this dep...

Hi, I am in need of suggestions on current solutions that can be deployed to provide secure third-party remote network access. Some of our vendors need to connect via the internet to servers and equipment they have provided (for monitoring & manageme...

I am seeing the error "Policy with a scan action must contain scan action rules and vice versa". I'm having trouble understanding what this is trying to tell me. I tried creating my own NMAP scan action, but that didn't work either. 

Hello, I have a problem with setting up SXP session between catalyst switches and ISE secendary node.All switches has SXP session to ISE primary (172.29.134.140) node set up.None of these switches has SXP session to ISE secondary (10.102.196.1) node ...

Hi experts!There is a Post-Upgrade step for ISE version 2.4 in the documentation:"With the operational data backup of MnT data that you created before update, restore the backup.Failing to perform backup and restore could trigger a High RADIUS Disk U...