Network Access Control

Hello Team,   We are using full-blown ISE (no ISE-PIC) for usual 802.1x (EAP-TLS-based Machine auth mainly) and now configuring same ISE deployment for PassiveID to distribute User-IP mappings from AD (via ISE AD Agents) towards WSA and FMC. We are n...

Client gets authenticated and result is applied but supplicant switch errors the VLAN TEST is non-existent or shutdown which is both no true. Is this a limitation of CISP?  %DOT1X_SWITCH-5-ERR_VLAN_NOT_FOUND: Attempt to assign non-existent or shutdow...

Is ISE able to alert (via email for example) if a specific command or commands are executed on a security device like a FW? We've been asked if we can be alerted if someone makes a change to the audit logging settings on a firewall (i.e. anything wit...

Is ISE 2.4 supported on CSP-5444? If so, are there whitepapers, CVDs, or references for such a deployment?

Hello All,ISE v2.3We have a Auth Policy for Noncompliant devices. Usually this means that their AV defs or Windows Updates are not up-to-date. In that Auth policy we assign a dACL. This dACL allows the client PC to talk to both of our ISE servers, Sy...

I have already discovered that I can use CURL calls via the ers API, and, for example:Add an endpointAdd an endpoint to an identity groupGet all endpoints in an identity groupI realize that an endpoint (defined by a MAC address) begins to "live" as t...

Hello, In our environment we are using meraki switches and as they do not support DACLs or ACLs for Posture redirection, we used call home list in the anyconnect configuration profile to let the endpoint reach the PSN. During redirection or before re...

Hi, We sending credentials for self registered guests via SMS. I'm I right in thinking that the SMS provider should supply the API syntax for encoding language specific characters like åäö or is this something that ISE should encode? RegardsTyrone

Hello, Could you please help me on this.. New devices are SNS 3595.We are trying to upgrade the CISCO ISE from 1.4 to 2.4 via intermediate OS 2.0.1 and can migrate the policies / DB from 1.4 to 2.0.1 without any issue, but while doing upgrade from 2....

I have a customer who recently upgraded from ISE 2.4 to ISE 2.6.  They are connected to the public Internet for Smart Licensing.  ISE now complains about *not* having a Wireless License.  This was not an issue prior to the upgrade.  I don't see anyth...

Hi All,I have just started deploying my wireless system with 1850 Mobility Express solutions. I have configured Radius authentication. The only problem is that I want to create WLAN with corresponding user subnet VLAN which can only connect internet ...

Hi Guys,I am authenticating via EAP-TLS in my wired LAN. What will happen if the machine does not have a user certificate in its certificate store, will it failover to MAB? Is there any dot1x to MAB failover in wireless as well? Thanks

Currently we are doing posturing in order to check below software installed  in client machine.Antivirus InstallationAntivirus Definition UpdateDLP Agent InstallationResult: User will have networks(working)Now we need to restrict access if below soft...