I am working with ISE version 2.4.xI am successfully using ISE API calls to get endpoint data as JSON, however I'm having very poor results with any of the query string parameters. ?filter=groupId.EQ.xxxxxx - this works.But, how do I do multiple filt...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi Cisco ISE guru, I have a weird scenario, after deploying about 700 endpoints in Enforcement(low impact) mode, some of the endpoints (so far 3 reported) ran into a scenario that the MAB auth keeps failing every 30 seconds even if the Dot1x passe...
Hi, I hope someone can help with this issue, I have set up 802.1x to use machine authentication and each time I try to get this to work, it uses the mac address of the device as the host name. Obviously this is not in AD as the computer name is doma...
Hi Experts, There is this requirement that I am testing out at a client. We are using NAM to allow machine and user authentication, so when both pass then access is granted.The client wants the posture assessment to run once a day, so make this work ...
ISE 2.3 patch 5 Is there a way to customize a guest portal (hotspot, self-register or sponsor) where I can have the following functionality: 1. hotspot like portal where user is required to enter email address and name where the system then auto ...
We are currently running Cisco ISE 1.2, and every day under the "Misconfigured Network Devices" section on the main ISE Page, I have a huge list of different devices that are all being flagged with the following error message: "12929 NAS sends RADIUS...
I am failing to grasp what trustsec is in relation to ISE and something like ASA. Is it group/user based authorization that can be tied to ACLs?
Hi Experts, Our customer would like to use ISE (TACACS) to control the CLI command authorization. However, they are using HUAWEI data center switch, and they want to limit “shutdown” command under ospf process, but allow this command under interfac...
Resolved! Cisco Prime PKI/CAC login
Hello, we currently are transitioning from ACS to Cisco ISE to control our AAA. I have Prime configured for TACACS+; however, when logging in I can see that Prime is using the local login rather than the ACS login. When I configured ISE as the TACACS...
Hello I am slowly going insane because ISE is reporting that I have the wrong password for my locally defined Identity that I use during an EAP-FAST authentication. ISE 2.4 patch 5 My authenticator is a Cisco 3750X switch running 15.2(2)E8 The Cisc...
We have a client with an ISE deployment in place to authenticate with dot1x on client computers. When the device is offline for an extended period of time, the dot1x reauth timer keeps attempting to reauth the session. Since there's nothing on the ot...
Team, A customer has an existing ISE deployment with 1000 base licenses. They have now decided to deploy another dedicated ISE instance for guest wireless access and would like to reassign around 200 base licenses from the original deployment. Is t...
I run 2 x ISE 2.4 Patch 5. I have scheduled a weekly backup (Configurational Backup). The size of the backup file grows every week (500MB on last week and now 750MB). Is there a way to reduce it ? What takes so much space? Before I was running ACS...
Hi all, I have setup ise on vmware and using a real switch for authentication configurations and a test pc. Network device is setup in ise together with mac-address of client however there is authentication failure! i have disabled windows firewall o...
Hi Team, Please your help, I´m configuring ISE for WiFi Guest Access, and I created 2 Guest Portals; Guest and Providers. The idea is to give different access depending of the type of user. The problem is; when a user try one portal and create a ...
