Hi , i have new deployment and i was asking about , the contcitvty between Cisco ise and my network , cisco ise have more than one port is there any way to connect my cisco ISE with two ports as ether channel or something for high availability ??
Hello, I am trying to do NAC for AP's 916x series and 913x series. However on some occasions the AP does not get added to Internal Endpoints and even if I add it it does not match the profiling policy. In auth report I can see it sending RADIUS attri...
Hello AllI have some questions related to cisco ise modes , sorry if it seems traditional but i need to verify my info. regarding this points:1- In monitor mode , can i still apply authorization results (for ex. dACL, vlan assignment) to the endpoin...
I am trying to get a better grasp on how these should be properly setup because I feel our current config is not. We use NAM (will move to Windows Native/TEAP in the future) with EAP-FAST/EAP-TLS and EAP-Chaining. Currently, our top two Authorizat...
Hey gang! I'm running into a strange deployment issue in my lab. Using ISE 3.2 Patch 4. The primary server is running fine as PAN/PSN/MNT. When I try to add a secondary server to the deployment, it is added successfully and the status of the new ...
Hi All Having a weird spontaneous issue on some WIndows PC's that are setup for 802.1x. After a complete bootup, ISE logs show that the PC is doing MAB authentication and are failing as expected. If I unplug the network cable and reconnect, then th...
Hello, We have ISE 3.3 Patch 4, we have enabled AD Probe, but not able to see attributes in Context Visibility and the endpoint profile is shown as unknown. We are doing EAP-TEAP with user certificate and machine authentication. DNS probe is also ena...
Hi, Am still navigating SDN with DNA Centre where I am upgrading device images using SWIM. I did an Upgrade to 9300 switches to a later iosxe image, after setting it as the golden image. What I don't understand is that even after successful upgrade...
I want to schedule an external configuration backup for ISE, DNAC , which is the best workaround. I have veeam as an available option, however I see they support sftp which seem veeam does not support. Do I dedicate a server , eg linux server then ba...
Hello, We are implementing ISE at a customer and we have enabled posturing for windows clients. When we check the endpoint attributes in Context Visibility we are able to see an attribute "PostureOS". Is it possible to use this in profiling policy to...
I am using Cisco ISE and have Radius DTLS configured on my cisco switch using the IBNS 2.0 template. I have a GPO set to push out the Supplicant and have the following EAP settings "Verify the server's identity by validating the certificate". I have ...
we're currently using Cisco ISE for user identity management, and we've noticed that ISE is showing all live sessions, including background/system logins and service accounts. However, for our operational needs, we only want to see interactive user l...
Hi Community Members,I am using ISE version 3.3 (VM) and currently vm has 7 interfaces out of which only one is in use. My question here is can I shut the other six ?
Recently I upgraded ISE VM from 3.2 patch4 to 3.3. After the upgrade, I was unable to access both CLI and GUI. GUI it does not open where as the CLI, soon after I enter the login credentials, it accepts and prompt again for the login. Multiple reboot...
Hi anyone Which file type ISE supported (.pfx) ( .crt + .key) or ( .pem + .pvk ) for guest portal ?
