Hi,I have a large implementation of TrustSec micro-segmentation using ISE in a distributed deployment with 2 ISEs for PAN and 2 for MnT and centralized PSNs in multiple regions which will cover alot of branches.I still need to understand more about t...
Hi,We are planning to migrate from ISE 2.2 that running on 3495 which is really slow, yes, we did worked with TAC on many SR to get it to response faster without luck(100K endpoints), that is why we are migrating to 3595 that we already purchased(bef...
Hello people, I need to transfer some log files from '/opt/CSCOcpm/logs/localStore/' to an remote FTP server.Someone have any idea how we can do it? I already tryed copy directly by cli, but this file is not found on 'disk:/' ISE25/admin# copy disk:/...
I have a team that wants to manage their ISE appliances the way the manage their other CIMC capable servers/appliances. Right now that's not supported but I'm wondering if it ever will be? Thanks!
Just a quick post to discuss some findings and to see if anyone has had something similar. The title basically describes it but I am doing a token based (RSA) VPN (GlobalProtect) with ISE. My problem essentially lies with the next tokencode mode pro...
I have a question. Are there any known instances where ISE has been seen to block all endpoint pc's connecting to a DC that has been newly added to an existing domain. When the new DC in HQ site is turned on a whole floor of endpoints get their NiCs...
Quick question... hopefullyin a distributive ise environment, with a separate MnT node... is the ise indexing engine suppose to be running? I know the PSN and Admin persona run the indexing engine but i'm not sure if the monitoring node is suppose to...
Hi, I am trying to configure SNMPv2 on my ISE nodes which are currently on version 2.3.0 and I have some questionsOn going through the Cisco documentation, I came across something called "engineID",used in command > snmp-server engineID <engineID>. 1...
HiCan we Restrict a client to authenticate on just one physical port?that's mean the client cannot change its own physical port on a switch.
Hello!Is it possible to gather information about device classification from Aruba controllers for profiling on ISE? And how to do this?
I am trying to determine a graceful way of implementing secure authentication (i.e. not clear text HTTP) authentication proxy on an IOS router. It seems the only difference in router configuration between HTTP based auth-proxy and HTTPS based is the ...
Issue web authen with huawei phone cannot redirect web.but iphone samsung etc. it workCisco ISE v2.0Cisco WLC 8.5.135
Hi Experts, One of my customer is looking for posture report which will be having machine host-name, switch port where machine is connected to and switch (NAS/NAD) IP address. Is it possible to get all the parameters in single report? As of now cus...
Hi Team, Just wanted to know the AES and SHA key length supported on ISE 2.4 for SNMPv3 Regards, Nancy
Are the numbers below in microseconds? nanoseconds? Also, what is the timeframe between each poll of the stats? ise-psn24-1/admin# show cpu statistics user time: 8777929 kernel time: 3176381 idle time: 1927199541 i/o wai...
