Hi, I'm detecting a Client (Win 10 with 802.1x Config) with massive high Repeat Counter. Could anyone explain me, what the reason could be? Is such behavior normal? Should I investigate the Client? What should I tell the Helpdesk Team to look for? ...
Hi everyone, I was looking up fixed bugs for ISE 2.4 P6 just a few minutes ago. ISE 2.4 Patch 6 has fixed 194 bugs as of now. For comparison, ISE 2.4 Patch 5 has resolved 10 bugs. So if I were to patch from ISE 2.4 P5 to ISE 2.4 P6, would 194 ...
Hello, Performing Wired Guest. On switch, authentication order is mab dot1x, priority is dot1x mab. Dot1x is enabled on the Native supplicant on the end user PC. Only wired guest is required to be done for this PC. Wired guest redirect works fine,...
Good day all, I'm having some trouble understanding the reauthentication timers or configuration on IOS and ISE.We are using the "Closed Mode"-deployment, where we authenticate clients with certificates or mac address and security groups in Active Di...
Dear All, I am in middle of implementing wired 802.1x in one of our customer campus with ISE 2.1.0.474 and its configured successfully, but after given demo to customer, they raise some requirement on which I would like to have your expert advice to ...
Hello, In the ISE Performance & Scale guide below, I saw a standalone deployment on a 3415 can handle 5,000 concurrent sessions. https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148 I have a cluster with two no...
I planned to deploy Cisco ISE as 802.1X and MAB authentication server in our environment. We have two units of Cisco N9K-C93180YC-EX version 9.2.2 running as server Switches. We would like to configure MAC Address Bypass authentication on connect to ...
Dear all, @jason K. - thanks to him as he had helped me with redirection for built-in "Please read the terms and conditions" and I'm now looking for nearly the same thing but for built-in HELP link, which currently redirects to Official ISE help guid...
Hi How does ISE detect if the cliet is a user or machine? I am trying to authenticate a machine certificate using EAP-TLS, but ISE goes to AD and check for user certificate instead of machine account? If I edit the certificate CN to hosts/<name> ...
Hello, I have Cisco ISE with the version 2.2. we have 2 PSN and 2 PAN, and I configure the authentication dot1x wired network and enable the posture for Cisco AnyConnect, well I need create the xml for the integrate with cisco ISE, Do you know ho...
Hi community, I am looking for a way to use Active Directory attributes for Guest Authentication. In my particular case, I would like to use a combination of last name and employee ID stored in AD as credentials for CWA. Is something like that feasib...
Hi, Are Nexus 9K switches supported for ISE solution - authentication, posture flow, guest flow etc? Can't see them in ISE compatibility matrix.
Hello ISE API experts. I have read the documentation within the sdk and the article from Thomas (great). We have just finished the migration from ACS 4.1 to ISE 2.4. We use it as a tacacs server with identities, network devices and devices admin poli...
In ISE 2.1 . When doing backup configuration both scheduled and manual , does ISE also backs up the certificates? or does this need to be done manually via CLI ? If i reimage primary pan/mnt node and restored from backups will it get back to origi...
2 questions about ISE architecture. Customer currently has standalone ISE deployment in DC1 and HA in DC2. Medium VMs running 2.4 for 6500 concurrent sessions. They want to add (resiliency) a branch office (BR1) and add DNAC functionality (introducin...
