Network Access Control

Hi, There are two types of assignment of SGT : dynamic and static. Static assignment, ISE will use SXP to inform switch. How about dynamic (user use 801.x for auth)? Will ISE use SXP or not?  

Hello, One of our customers is having Avaya IP Phones with static IP. The customer has disabled LLDP in the switches due to audit requirements. What would be the best profiling probe method to use in such scenarios?.   Thanks Shabeeb  

guys pls check the screenshot attached of an ISE patch condition (Win10-Patch Condition.jpg).Does it means ISE posture check whether Windows OS critical patches are up-to-date or BigFix client agent is up-to-date?   I had applied this patch condition...

Hello,is it possible to use two external identity sources one after the other?We do TACACS and RADIUS for admin access to network and security devices.In a first authentication step I need to ask AD because there is a MFA system connected to.But in a...

Hello Guys,  Being new to cisco ISE am trying to authenticate windows PC using DOT1X with following test cases:- 01. By using local PC Windows11 login credentials and ISE Internal users am able to authenticate. Everything is okay 01. By using local P...

Hi, Our customer wants to integrate Cisco ISE with Azure AD, and they want to use AutoPilot to autoprovision the computers. But how can we authenticate and authorize a computer that dont have anything? If we integrate with Intune this will work? Envi...

i'm trying to configure a role that has super admin access in every way except the ability to edit/add/delete devices.  i feel like this should be simple but i've been playing with it for a while with no success. menu access permissions do not appear...

Hey all,My organization has a complex device ecosystem. We have many unprofiled devices that I am working on researching and creating profiles for in ISE to work toward a Zero Trust architecture. However, many are IoT devices or devices that are Syst...

Dear @Greg Gibbs  https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/218197-configure-ise-3-2-eap-tls-with-azure-act.html When we are following the above deployment "ISE 3.2 EAP-TLS with Microsoft Azure AD" only with user ce...

Hello community, I´ve recently implemented Remember Me in a customer guest network, but now I'm facing issues with the proliferation of randomized MAC addresses on recent software updates of phones and even laptops, which basically cancels the functi...

Hi Guys,   I've to solve an interesting problem. In an 802.1x environment if the supplicant is configured correctly, all is supposed to work as expected without any issue.   But what happens if an employee from company A with a supplicant configured ...