Network Access Control

Hi Experts, Seems that Cisco will be moving to using C3PL more and more. I was going through the following documentation to learn more about new-style of configuration here This documentation does explain how to get to do this C3PL configuration for ...

Hi,   I have setup where i am trying to do posture for all the devices connecting to my network.   my default posture status is Noncompliant so by default it takes this for the posture of the client.   Now i have andriod, Iphones or iPads --> these a...

Hi,   We are trying to do Cisco ISE TEmporal Agent, the agent is getting installed but it's keep's failing saying not able to find the policy server.   But the same configuration is working with Web agent where the agent is able to find and do the po...

I am trying to create an authorization profile in ISE. My vlan for that profile is 50. When I try to add the Tag ID as 50 it is not allowing me to do so. The message I am getting is : “Tag ID should contain only numerical value and in the range 0-31....

Hello,If I need a Installation of ISE as VM in for a production enviroment. Which OVA file should I download?These are the licenses I have:R-ISE-VMS-K9=L-ISE-BSE-P2ISE-2.2.0.470-virtual-SNS3515-200.ova    --- ISE 2.2 OVA file - Virtual SNS-3515 200GB...

Hi Folks,    Looking for confirmation on the following  - 1500 Network Devices that are managed by a team of 10.  - Use Radius to authenticate the user managing the network device. No TACACS today.    What is the minimum license required?   Also, wou...

I'm looking at multiple matrices in ISE for different TrustSec segments. Does anyone know the upper limit of matrices in ISE? Can I create 150 matrices without performance issues?    Thanks,   Rob 

Hello,I have configured trustsec vlan enforcement on the Cat9300:    cts role-based sgt-map vlan-list 222 sgt 222    cts role-based enforcement    cts role-based enforcement vlan-list 222but the command "show cts role-based sgt-map all" shows nothing...

Hi All, I see that when configuring the posture policies, all the conditions that I specify will be evaluated based on AND operation. But, what if I want to specify condition based on OR operation? This is because I have a requirement, where I am che...

Hi,   I want to clarify about do we have any caveats when using the source IP/Subnet in the Redirect-ACL when doing posture with ASA or Switch. I didn't find any example out there with source address.   Also, comment about the same with DACL ?

Hi, I want to perform 802.1x user authentication together with Machine Authentication using Client Certificates. The problem is with Machines that are not in AD. Our policy allow users to bring their own devices as long as they comply to our posture ...

Hello Friends,I am trying to add a repository in ISE2 to upgrade the ISE from version 2.2.0.470 to 2.4.I can successfully add the repository adding the host_key in the ISE secondary node. But when I do sh repository SFTP, I see the below error. isese...