Network Access Control

Hello We have created a simple website to onboard users' endpoints using just their MAC address, which we also assign to their AD username using portalUser attribute of Endpoint API. However, this is an interim tool... in future we would like to swit...

Good morning all,Currently I've inherited a 6 node deployment: ISE 2.1 patch 8Primary admin/ Primary MnTSecondary admin / Secondry Mntand 4 PSN Nodes.  ise 2.1 is having disk space issues filling up the /opt/ and I was advised by TAC to upgrade to ne...

I'm setting up simple lab with two 9300 switches (ver. 16.9.3) connected with L3 link (no switchport).I've configured trustSec but I noticed that policy is enforced on switch 1 although destination host was connected to switch 2. I wonder if it is be...

Hi Guys   Can you please confirm what happens if a customer does not renew their PLUS/APEX licences on time, is there a grace period after the expiry date ?   Thank You   Julia

Hi,   According to ISE architecture for a large deployment, each persona requires a dedicated node, and some services call for dedicated nodes also (eg. PassiveID PSNs) whilst other services can be shared with existing RADIUS PSNs (eg. TrustSec Polic...

We have deployed ISE on VM and having version 2.4 patch 6.I was checking TACACS commands reports that ISE exports. I found that ISE was only showing part of the actual command the user typed.e.g.If someone typed "show run | sec tacacs "ISE would show...

Hi All, I am trying to configure guest CWA to differentiate between guest and employees that are logging into our guest portal. I believe that I can do this by changing the portal parameter 'Employees using this portal as guests inherit login options...

I am trying to find some information on the number of concurrent sessions supported when we use SNS 3615 as PAN in a dedicated deployment All that I have found in this link is about using 3695 as PAN https://community.cisco.com/t5/security-documents/...

Environment is running an ISE cluster with four 34xx appliances:    - Active/Standby PAN & MnT - 2 x PSN   Customer would like to consolidate into two appliances based on their concurrent session count and also migrate to VM since appliances due to E...

Hi experts:   My customer wants to check the OS patch for MacOS and windows via anyconnect posture module. I think posture cannot check the OS patch derictly, posture module need to active the sccm agent or os patch mangement agent for checking OS pa...

Is there any impact of disabling internal CA in a distributed cluster if we are not using internal CA to issue any certs to endpoints or for any other pxGrid clients ?   I know a distributed cluster has its own PKI hierarchy starting with root CA fro...

Any chance we could get a native Let's Encrypt ACME client in a future version of ISE (hopefully with DNS01 verification)? This would allow ISE to automatically replace certificates (802.1x, guest portal, server, etc.) without administrator intervent...