Network Access Control

Hi,   I have imported multiple network devices to ISE 2.4 and I was wondering if there was a way to add TACACS authentication and shared secret to multiple devices at once. I can add them individually but since I have a large number of network device...

Hi team,   15k RADIUS concurrent sessions and around 2k of TPS, quoting 2 ISE medium appliances for PAN+MnT+PSN and 2 dedicated small appliances for T+. I would like to doublecheck this is correct, because community link has two key sentences around ...

How we customize Sponsor Portal to have another sponsor as approval. As customer require sponsor to create guest account with another sponsor (head of department) to approve this guest account ?   Or we could get Self-registration guest with Sponsor ...

Hi,   we have a requirement to create multiple custom header on ISE PIC in order to parse different types of syslog messages. But when I click on the "create custom header" button, it shows me the old header I had created.   Is there a way I can crea...

All,   I have a situation where my customer wants to do dot1x machine authentication, but the corporate machines don't (and won't) have certificates signed by their root/intermediate CAs, which signed the ISE certs. The reason is that their CA issues...

Hello, I have a customer that intend to have a distributed deployments in several regions. Each region will have a group of 2 PSNs. They want to delegate admin per region. So i want to understand down to which level can we delegate the admin right; P...

HiI am unable to figure out how to enrich the Access-Reject reply with additional Radius attributes in a particular use case - I am looking up the Guest User identity store and if the user is disabled then I want to return a custom Reply-Message to t...

Hi,   Is it possible to configure any posture policy to detect and prevent connection of endpoints Dual-Homed. We would like to have a solution with a temporal agent for posture to prevent Dual-Homed stations connected to network. Any suggestion ?   ...

Hi,   I am under consideration of enabling profiling along with dot1x in our enviroment. However i have couple of questions regarding how actually profiling would work.   What are protocols allowed before 802.1x authentication. Are they CDP, STP, EA...

Looking for a best practice or reference guide to share with a customer regarding centralized vs. distributed PSNs.  The closest guidance that I've found is from the Cisco ISE For BYOD And Secure Unified Access book.  Thank you!

Hi!   This discussion and doc show how Microsoft SCOM could monitor the hardware ISE nodes: https://community.cisco.com/t5/policy-and-access/ise-management-pack-for-system-center-operations-manager-2012/td-p/2464102 https://www.cisco.com/c/en/us/td/d...

Guys, I have a laptop domain managed and I'm deploying Cisco ISE 2.4 on the network. The laptop is connected to a Catalyst 9300 switch. I'm running Wireshark instance on the laptop. I noticed the laptop send the EAPOL-Start packet three times with no...

Hi all,   We have a customers who wants to use profiling of 2802I AP´s in ISE. But it appears there is a difference between real life CDP info on switches compared to what we provide on profiling feed.   CDP info gathered on switch: 800 AP cdp info f...