Hello, My trooble is that i want to import some users on ACS. For exemple i downloaded the template show on file operations. the first line is: name:String(64):Required,description:String(1024),Email_Address:String(1024),"dateExceedsEnabled:Boolean(...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
In a distributed ISE deployment, what kind of issues are expected when the latency between Primary PAN and any PSN in the deployment goes beyond recommended level of 300ms? Will that impact the authentication service of the PSN with high latency only...
The remove option on ISE 2.4 does not remove the endpoint, it just marks it as static false. anyone experiencing the same or have seen this in the past.
Hi Team, As far as I see ISE does support Windows 7 for on-boarding service: https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/compatibility/b_ise_sdt_26.html#onboardingandcertprovisioning Does this support include Windows 7 Embedded OS as...
Resolved! Ordering SWSS for ISE 2.2
Hi. A customer that is running ISE 2.2 would like to add support to it, as it is not eligible for a renewal. They don't plan to upgrade at this point beyond 2.2, so I want to make sure that ordering R-ISE-VMS-K9= is applicable, once they are withing ...
Resolved! ISE OPS backup too small in size
I recently re-installed MnT and Admin nodes. I am running two nodes on VM with version 2.4 patch 5. I triggered OPS backup and it was 699KB in size. Why size it so small ?
Resolved! ISE Sponsored Guest Access
2 Questions: 1) For the guest access self registration page there is a place to enter the email of the "person being visited". Is there a way to customize this page such that instead the guest can click on a drop down box for a list of sponsors? Th...
Resolved! ISE Dual NIC IP Question
I am currently trying to deploy an ISE 3595 server on a client network. The client is having radius reach-ability issues on a their management VLAN. It is currently joined to the network, has the signed certificates, etc. It has been identified as a ...
Resolved! ISE Re-Authentication Timer
What is the maximum value for the re-authentication timer that can be configured in an authorisation profile?Many thanks Ross Shehov
Resolved! Does cisco ise also able to send out email notification if a posture condition has failed ?
I believe there is a schedule report that can be run ie: posture assessment by endpoint and there is notification send whe the report is executed.The question is is there a way to be immediately notified if an endpoint fails posture checks by ISE ? ...
ISE 2.3 patch 5 I am trying to do BYOD with Chromebook and followed the document here - https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-21/200552-Configure-ISE-2-1-for-Chromebook-Onboard.html In the byod portal I get ...
Resolved! ISE External backup sizing
we are trying to create an SFTP server for ISE config and operational backup for 25k user in a 6 node distributed deployment with 15 days scheduled backup, version 2.4 patch 5, any recommendation on backupserver sizing (cpu,ram.disk etc) ? also any n...
Hi,I am running test instance of ISE 2.4 with patch 5.When I am trying to add to AD to external identity sources, the box is not populating here. (The box that comes post clicking Add)But, if follow the same steps on my remote machine (which is close...
Hi, I was working on the use case of Cisco ISE anomalous behaviour particularly on MAC spoofing for my SIEM. I've come across this https://clnv.s3.amazonaws.com/2018/usa/pdf/BRKSEC-3697-Reference.pdfAnd it seems that the message codes for MAC spoofin...
I am looking for a way to setup 2 interfaces on ISE 2.4 and have GI0 -- be in it's own VRF like I can do with a Router, and then the GI3 be used solely for Authentication traffic and no mixed traffic between the 2, I would like basically I would need...
