We’re implementing a script-based posture condition in Cisco ISE to check domain join status on endpoints.As part of this setup, we’ve added the SHA-256 fingerprint of the ISE PSN's portal certificate into the AnyConnectLocalPolicy.xml file on the en...
i have question is cisco ise can work as dhcp server ??? and give dhcp for all endpoint
In cisco ISE Distributed deployment, If i enable SNMP on PAN ? Will snmp enable on remaining nodes ie., Secondary PAN, MNT Nodes and PSN Nodes
How to configure SNMP V2C in cisco ise 3.2 GUI ?
I want my VPN users on a Cisco ASA to authenticate against ISE but use Azure AD for MFA on the backend. So far, it seems there are three ways to do this. My requirements are that I must use AnyConnect and ISE. Setup Azure AD as External Radius Server...
My client is looking at migrating from their current On-Prem Cisco ISE deployment (2 x Physical ISE Appliances in separate Datacentres) to Azure.Original intention is that they where looking at installing 2 x Axure Marketplace Cisco ISE Appliances in...
Hello, I need to get the last successful authentication date of an endpoint based on its mac address from ISE. This will have to be automated down the road so using the GUI Reports is not an option.After testing the API I realized it's not possible t...
Hello all, In order to prepare a upgrade on my ISE server, i asked the client to create a FTP repository When I tried to validate the repository on the GUI, I received this message : Repository validation failed due to error - . In case Backup was re...
Hi , i have new deployment and i was asking about , the contcitvty between Cisco ise and my network , cisco ise have more than one port is there any way to connect my cisco ISE with two ports as ether channel or something for high availability ??
Hello, I am trying to do NAC for AP's 916x series and 913x series. However on some occasions the AP does not get added to Internal Endpoints and even if I add it it does not match the profiling policy. In auth report I can see it sending RADIUS attri...
Hello AllI have some questions related to cisco ise modes , sorry if it seems traditional but i need to verify my info. regarding this points:1- In monitor mode , can i still apply authorization results (for ex. dACL, vlan assignment) to the endpoin...
I am trying to get a better grasp on how these should be properly setup because I feel our current config is not. We use NAM (will move to Windows Native/TEAP in the future) with EAP-FAST/EAP-TLS and EAP-Chaining. Currently, our top two Authorizat...
Hey gang! I'm running into a strange deployment issue in my lab. Using ISE 3.2 Patch 4. The primary server is running fine as PAN/PSN/MNT. When I try to add a secondary server to the deployment, it is added successfully and the status of the new ...
Hi All Having a weird spontaneous issue on some WIndows PC's that are setup for 802.1x. After a complete bootup, ISE logs show that the PC is doing MAB authentication and are failing as expected. If I unplug the network cable and reconnect, then th...
Hello, We have ISE 3.3 Patch 4, we have enabled AD Probe, but not able to see attributes in Context Visibility and the endpoint profile is shown as unknown. We are doing EAP-TEAP with user certificate and machine authentication. DNS probe is also ena...
