Hi Experts,I have an issue, where posture on anyconnect gets stuck at 26% while checking for conditions. I noticed that this is caused due to the SCCM patch definition check which has been specified in one of the conditions.It is observed that on som...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi, we are in a process of deploying ISE for the organization. recently, we have been told that, we need plus licenses for Cisco Phones to do 802.1X.01. Why do we need special profiling when Phone can initiate 802.1x session02. why can't we use CAPF/...
HI Everyone, I am deploying the Wireless dot1x authenticaton.i find the client authen success on ISE live log,but after i attach the detail log, it shown "event :5206 pac provisioned" and EAP failure,what's reason about this? thanks
I have a customer trying to leverage the APIs to manipulate policies. They are using ISE for their authentication and policy associated with MDU WiFi. Speaking with Stephen Colby, he mentioned that some functionality is coming with policy authoring ...
Hi Cisco Community, I have set up posturing on our ISE servers for Anyconnect clients. This is working fine but an additional requirement is for ISE to scan the endpoint machine for a specific certificate located within the Trusted Root Certificate ...
Hello I am in the midst of a security audit and one of my issues is the password hashing algorithm on a switch is type 4. I am on IOS 15 so I was wondering if there was a way to increase the algorithm in place?What I am asking is can I upgrade the al...
Resolved! Services on the Cisco ISE 3515
I am back to my questions while working on the Cisco ISE setup. As of now our IP addressing is done and we are able to login to the ISE over GUI. When I browse over to Administration --> System --> Deployment --> Profiling Configuration I see some se...
ello everyone, I run 15.5 IOS on various routers and I'm looking for the statements to accomplish this: -authenticate via aaa radius then use local database if radius is down (this works: aaa authentication login default group radius local)-do not re...
Hi, we have an issue about AD Auth and ISE, sometime some users are disconnected constantly, We must to restart PC or Reinstall CA certificates, It doesn't happens in all users, but in the users that it happens frequently are disconnected and unabl...
Hello,I am running ISE 2.4 and ASA v9.9 in my lab setup.I have two user on ISE and assign different priv-level to these users:on-admin: PRIV15on-read: PRIV3Both user accounts on ISE has username/password as well enable password. My ASA config: on-as...
I'm fairly sure this isn't possible with Meraki but hoped someone could confirm. Customer would like to verify that a device is corporate owned (reg key/file check etc. as with AnyConnect posture) when establishing a Meraki VPN connection with ISE pe...
Hello Folks, I know how device admin license work for TACACS. May I know how base license been consumed for device administration using radius, is it per network device count or per radius session? Thanks.
Resolved! ISE 2.6 - Wireless AAA-Override
Hello @ all, We currently operate a Wi-Fi network with 802.1x authentication based on a Freeradius distribution.Now we want to switch to the ISE 2.6. As far as everything works, however, a fact bothers me. In the "Policy Sets" we have created a new p...
Resolved! AD with Windows Server 2016 and DFL 2019
Hello everyone, Does Cisco ISE 2.2 or Cisco ISE 2.4 support an Active Directory running on Windows Server 2016 with a Domain Functional Level of 2019? Thanks ! Ryan
Resolved! Tacacs single-connection
Dear Cisco, After running into the session limit (20k) of our ISE 3495, we followed tacacs recommendation of Cisco TAC to implement single-connection feature: We encountered some issues during our POC: We change the config to : tacacs-server ho...
