Network Access Control

Hi Guys,   I want to make an authorization rule based on MAC address. But when I want to make the rule, I cannot find any MAC address related attribute on Library Conditions. When I check further, I found MAC address and OUI on Dictionaries. Is there...

Hi, The "aaa group server radius" suggest the request goes to the first member of the group. In my case server1 however server3 get most of the request's   Is there something I overlooked? HW: WS-C2960-24PC-L SW: 12.2(58)SE2   Below the config.   Th...

I have read a few items in this community about the ISE Secondary PAN but not addressing our issue. We have our nodes up, ISE1,2,3 and 2 nodes in another location, ISE1 and 2. When trying to access the remote locations we were good for awhile but for...

Hi Guys,   Right now I have a portal in working condition. The logic is pretty simple. When a device tries to connect to the SSID, ISE will check whether the MAC is already stored in Internal Endpoint or not. If yes, then grant access. If not, then r...

Hi Experts, As a continuation from the previous post, I was able to tweak the posture redirect ACL to allow the redirection to work.Here Now the user is able to get the redirect URL and is able to pass the first page. So, user gets to this page:   Th...

hello   The RFC 2865 says that Reply-Message (attribute 18)  MAY be sent in Access-Accept and/or Reject - it's not mandatory of course, but I noticed that ISE 2.4 will allow me to configure both scenarios - but it will only send the attribute in the ...

Team,   Was wondering if ISE 2.2 patch 9 supports the large VM ova? My understanding is that the VM sizing was introduced in 2.4.    I  have a customer w/ 80k concurrent endpoints is having issues with UI responsiveness and was hoping I could increas...

Hi All,   we are currently trying to integrate ISE with Ruckus Wi-fi. the main purpose of usage will be for the guest. As Ruckus does not support URL redirect we will need  to use the DHCP and DNS of ISE in the pre-auth vlan to sinkhole all requests ...

In windows 7, it was easy to edit all security settings for any SSID by simply clicking on any known SSID. But in windows 10 only limited sittings are shown when editing the properties of any known SSID.    The only way I found if I am not sure about...

Hello,   We have two ISE nodes primary/secondary that are connected to our AD and everything works fine, except the patches. When I installed patch 1 to 3, Network Resources were on read mode for me with my AD login, but it worked fine with local adm...

Hi!   Cisco ISE version 2.4.   I have created a Endpoint identity group name whitelist and then added the few MAC address in it. The plan is to use this as whitelist of few devices we have. I created policy authorization policy for it.   Radius:Calli...

Hello All,   I had the opportunity to hit this Severity 1 Catastrophic bug while installing patch 4 last night and it got me thinking.   https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm93698/ Why is an available patch still available for download,...

Hi All,  What is the best approach to migrate from ACS 3.3 to ISE ? does it make sense to migrate ACS 3.3 -> ACS 4.x and then to ACS 5.x  and then to to ISE ? Would it be better to do a new ISE installation and re-configure all the acs policies in IS...