Network Access Control

I am having trouble making something work. I want to apply a service-template only if mab and dot1x both fail. I am trying to use concurrent authentication. I used a class that is listed as an example in the Cisco IOS Identity-Based Networking Servic...

Hi Experts, I created two conditions, one to check installation of AV and second one to check the definition of installed AV.Now, when I run the reports, I see that AV install check condition has been called twice, once by the install check and secon...

Hi All   I have a funny problem: A guest account has expired. The guest tries to login but doesn't succeed (normal). I extend the account via the sponsor portal. The guest tries again but the login fails (user expired) and the guest account duration ...

Hi Experts, I am currently using ISE 2.3 I need to create admin users and assign admin groups using APIs. I haven't been able to find a PUT method under the adminuser api. Is this supported? or is there any other way to create admin users? Thanks.

Hi Team, We are exploring 802.1x authentication and authorization with posture using router 841 or 1921. I know that it supports 802.1x authentication but not sure do they support URL redirection and CoA.   Can you confirm it? or redirect me to appro...

Machine Authentication while using the Windows Supplicant is succeeding (live log attached). Machine Authentication while using the AnyConnect NAM (profile attached), is failing (live log attached).   NAM log shows something which is not clear: 24210...

I am working with ISE version 2.4.xI am successfully using ISE API calls to get endpoint data as JSON, however I'm having very poor results with any of the query string parameters. ?filter=groupId.EQ.xxxxxx - this works.But, how do I do multiple filt...

Hi Cisco ISE guru,   I have a weird scenario, after deploying about 700 endpoints in Enforcement(low impact) mode,  some of the endpoints (so far 3 reported) ran into a scenario that the MAB auth keeps failing every 30 seconds even if the Dot1x passe...

Hi, I hope someone can help with this issue, I have set up 802.1x to use machine authentication and each time I try to get this to work, it uses the mac address of the device as the host name.  Obviously this is not in AD as the computer name is doma...

Hi Experts, There is this requirement that I am testing out at a client. We are using NAM to allow machine and user authentication, so when both pass then access is granted.The client wants the posture assessment to run once a day, so make this work ...

ISE 2.3 patch 5   Is there a way to customize a guest portal (hotspot, self-register or sponsor) where I can have the following functionality:   1. hotspot like portal where user is required to enter email address and name where the system then auto ...