Welcome to the Cisco Community Ask Me Anything EventWe invite you to participate in our upcoming Ask Me Anything (AMA) conversation. Please submit your questions from Thursday, April 23, 2026, through Thursday, May 7, 2026. Our experts Miguel Martine...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! Cisco ASA-55xx NG IDFW CDA Alternative
Hi All, I am looking to implement IDFW on the network using Cisco ASA 55xx NG appliances. I understand the Context Directory Agent is not supported on ESXi 5.5 upwards and also potential support issues with Windows 2012 too. Looking at the download...
Resolved! Integrate Meraki AP's with ISE
I plan to integrate Meraki AP's into ISE. I need to add the Meraki AP's as network devices to ISE. Assuming the AP's are on the same subnet couldn't I simply create a single network device in ISE for the AP's and use a subnet address for them instead...
Resolved! ISE downgrade from V2.3.6 to V2.3.
Hi expert, My customer will plan to upgrde the ISE from V2.3 to V2.3.6. They would like to know If the upgrade fail, Is there downgrade guide? or should they re-image the ISE to the V2.3 and restore the configuration(V2.3)? I am looking forward to ...
Are there are best practices around using ISE with source-guard, since source-guard will apply a port ACL, what do we recommend in terms of deployment in these cases?
Hello , I'm trying to configure the dot1x timeout in the global config , I have been verified the command reference guide for 15.2 IOS in 2960X switches and is possible to configure globally but when I try to configure the command dot1x timeout tx-p...
Hi, The 2 key end of support milestones for the ISE 3400 series hardware in the End of Sale notice are shown below. Please advise on what happens after 31st October 2019 (relating to application software), if a TAC case is raised on ISE. Will norm...
Resolved! Support for new O365 MDM on ISE
Hello Team, 1) My customer is interested in using O365 MDM that comes free with O365. This is not the same as intunes. Just wondering if we support it on ISE yet? 2) Also, do we have any integration issues with MDM when ISE is a part of SDA fab...
Resolved! SR is 686525078
Summary: They renewed their company CA. TAC stated that ISE cannot hold 2 certs with the same subject name. This seem to work before and this is a bug. Customer wanted to ensure this was a to be fix. It seemed the TAC was not sure.
Hi all, When using an application condition for posture, does the letter case on the process name string have to be exact? For example: If the process name field is set to "ExampleProcess", will a process with the name "exampleprocess" still ...
I would like to please get some feedback about lSE-PIC leveraging the Active Directory Agent for Easy Connect. I have been told recently by a Cisco Engineer that the AD Agent is not supported with Easy Connect. Is this true? If Easy Connect is not...
I will start by saying I have successfully implemented the IBNS 2.0 configuration and can make 802.1x and MAB authenticate instantly with one of them always failing of course and it's great! I am going to ask a loaded question that I'm sure begins w...
Resolved! Clearpass integration with ISE
Are there any documents describing how to integrate ISE and Clearpass currently?
One of my customers needs to place different BYOD devices in different endpoint groups during the BYOD onboarding/provisioning. However, the BYOD portal does not offer this functionality. Instead, the portal is tied to a specific endpoint group where...
Is it possible to assign a group-policy using ISE/RADIUS on FirePOWER Threat Defense, like it was on Cisco ASA?
I am trying to improve the security of some of our switches, one of the things I want to do is change all the tacacs keys from encryption level from type 7 to type 6 (aes). some of the switches have the option by default for "tacacs-server key 6 pass...
