Network Access Control

Hi Experts, We are deploying ISE for our wired environment and we have a site that majorly has a mix of HP switches (Aruba and H3C). The configuration and testing of the Aruba switches was seamless, now we are stuck with HP5130 switch, the redirectio...

Not understanding the Max Merged & Easy Connect Sessions* (Shared PSNs) column in Table 1.  Can you elaborate on that?   https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_...

HI,   Can you please share how you manage to change VLAN on WLC per user login ? I have corp wifi with flexconnect and using one VLAN 10 , for unknown and non-compliant users that have only access to ISE .   I user become compliant i want to change V...

I always change the password prompt in ISE for TACACS to "AD Password:" to signal to the network admin that TACACS is working.  Older IOS versions don't respect the password prompt change and neither do Nexus switches.  Has anyone gotten password pro...

We are having some strange issues with profiling:   MAC book, OUI apple device, OSX MAC OS X  but user agent contains "Windwos NT 10"   The final profiling results is Windows10 workstation.   the windows VM is on Paralells (shared mode).   Also we ha...

Hello,   I have an ISE 2.2 patch 10 full distributed deployment in which I am using Airespace-ACLs for wireless clients. It is works successfully except when client connect to a Flexconnect AP. Do you know if is there any limitation to use airspace-...

Is it possible to install Cisco ISE 2.4 on Microsoft Azure? If so, could someone please provide instructions on how to achieve this? Is Cisco ISE 2.4 supported on Microsoft Azure yet?

I suspect I know the answer to this, but thought that I would throw it out there anway...With Cisco ISE 1.2 is it possible to enable 802.1x machine AND user smart card  authentication simultaneously for wired/wireless clients (specifically  Windows 7...

Hi, I have an ISE RADIUS setup where I would like to return a different static framed IP address to a client based on the source NAS that issued the request to ISE. i.e. if NAS1 sends the request, return user1 framed IP address 192.168.1.1, if NAS2 s...

We're currently doing a tech refresh and replacing older switches with 2960s and we're having an issue with our switches displaying UKNOWN when doing the command "sh auth sess". Here's an example of the command output. The switch I use in this exampl...

I have a doubt here.   Is there any other options available to do authorization of printer which don't have any domain credentials ? other than mab and profile attributes ? combination of (mab + serial number + any) for authorization ? Is it possible...

Hey guys   My client is migrating 4xACS deployments to 1xISE instance. The migration allows only 1:1 ACS to ISE. So my client migrated their biggest ACS env to ISE.   What is then the best way for my client to import the other 3xACS env policies to t...

Need a quick confirmation: on ISE 2.4 can a customer exceed license count without business impact both in short and long term? How about letting Plus/Apex lapse?   (I've seen out of compliance messages on 2.4 that worry me)

Dear All In my setup, I have two locations, Tower 1 & Tower 2. I have a PAP-T1, PSN-T1 & a MNT-T1 in Tower1 & only one PSN1-T2 in Tower2. All are in sync & running ISE 2.2 patch 3. Tower 1 & Tower 2 are connected across WAN.I am trying to add a PSN n...