Network Access Control

Hello,   We have a use case where users should be authenticated by username-password/certificates both simultaneously for Windows/Mac. Is this possible?   Thanks, Rakesh Kumar

The integration of ISE with Aruba is being carried out. ISE is in version 2.2 and is being integrated with an IAP that is in 8.5 The configuration was done by guiding us with the following document, where each step is explained well.https://www.cisco...

Hi everyone. First a small background. My customer needs to run some Acceptance Test Protocols, which includes the complete deletion of a VM (which runs a ISE PSN), and restore it from scratch.  We use one of the ovf files to create the VM, and we ne...

Is anyone running Meraki Wireless and using dACLs for their users based on SSID membership or AD group membership? I assume this is possible..I found an article on posturing with Meraki. 

Deployment Type 1:We have two sites interconnected by WAN solution. Site A: One server ISE for all node (PSN, PAN, Mntg) with a domain controller Site B : One server ISE for all node (PSN, PAN, Mntg) With a RODC (read only domain controller). This RO...

I currently have profiling groups to profile devices, say Computers, Scanners, and Phones. These groups have Identity Groups which were created with a parent group of Profiled. They are also a member of a Logical Profile called All Devices.  After a ...

Folks, Customer wants to check if a MAC Address exists in SCCM for an 802.1x authentication. This works for MAB but this is not a MAB request. This post says no, it is not supported: https://cisco-marketing.hosted.jivesoftware.com/message/248720 That...

Hello Guys, I have a couple of WS-C4507R+E running in VSS mode, and I'm trying to upgrade the license for the standby peer, and I'm trying to find the best procedure to do this with the minimum service interruption.My plan is to do a vss switchover r...

Hi experts,  My customer gave me another challenge, to replace all cisco NAD to H3C.   Here is their request, do the posture check, if the PC is  no compliant, put them to VLAN 60,  then put them to VLAN 20 after their PC compliant. Everything is OK ...

ISE 2.2 Patch 13 and Endpoint delete issue. Hello,I did setup RBAC policy Menu + Data for Admin User with limited permissions.When this Limited Admin logins and try delete endpoint under the menu: Content visibility > Endpoints it got an error messag...

Hi Gents,  ISE: 2.3.0.298; Patch 5  we use a self registered guest portal. Now - i need on the "registration form" an additional button which clear the form field "ui_person_visited" if needed. It should replace or fill in the text within the form fi...

Hello Gents, https://community.cisco.com/t5/security-documents/ise-guest-self-registration-person-being-visited-sponsor-choose/ta-p/3636453i need a script that filter the results of locations by choosing the time zone dropdown form field. Similar lik...