Network Access Control

Hi, I wanted to replace the existing 3315 hardware to 3415 or higher hardware.The existing 3315 device is configured in standalone mode and I got 2 new 3415 and am planning to deploy in distributed mode.What will be the best approach to migrate from ...

Hi ,  I have a question  regarding CTS SXP in ISE . If I do automatic PAC provisioning in a 3850 series switch and import PAC on ASA as well . I am configuring DHCP on switch for Dot1x and MAB authenticated endpoints. I am configuring SGACL on ASA to...

Hi folks,How do I get current information from ACS 5.3 about TACACS+ transactions per second (tps)?  I can only see T+ authentications per day summaries.  I need this to size for a migration to ISE for T+ only deployment and the ISE team has tps numb...

I am trying configure 7945 use MIC certificates to authenticate in ISE. I have already reviewed the information in "ISE Secure Wired Access Prescriptive Deployment Guide", and it looks like everything is ready to work. However, the phone keeps failin...

we have 3 AD domains with Same name in our environment, can ISE join to 3 domains as 3 have same name ?

Hey,   we have cisco ise 2.2, we have some critical devices in the network and we have profiled them. Everything is working fine. As the default nature for authentication on ise, if the end device cannot pass the authentication then it will go to the...

Hello, Trying to locate the SKU to enable cisco Tacacs+ (Device Administration) license. Should be ~$4500 - but not finding it. Anyone had any luck? Thank you! j

Hi, Customer is using SCCM server for deploying Symantec AV on user systems.   It is known that ISE (Anyconnect client) can integrate with SCCM client for automatic remediation for windows patches.   Can same integration be used to install Symantec A...

Hi expertI have implemented guest self-register auto login and used script to check email domain for person being visited.I need to check email address of person being visited with UPN or mail on AD for verify account is correct. Please Suggest.

Hi, Customer wants to deploy device administration solution. They have offices in various part of world. DC & DR will be in India.    As per understanding, ISE nodes requires max 300ms latency between them. But what is latency requirement between NAD...

Hello,  I am trying to use MAB authentication to authenticate a couple of 7945 IP phones to CUCM.The authentication/authorization seems to be working find from ISE perspective, but the phones will only register to CUCM when I have the "authentication...

Hello Team, I’m wondering, rather than using traditional TACACS, if we can use SGTs linked to AD groups that provide access to log into the SDA-based (fabric) or non-SDA based devices? 
 In other words, can we implement authorization for management a...