TrustSec is offered as a supported solution on the Nexus 5K as per 6.3 system bulletin.Recently unable to enable vlan enforcement on a Nexus 5596 due to the presence of a L3 module and associated routed SVI. The model does not appear to support same...
Hi,I want to restrict AD group (VIPUserMAB) on guest self-reg portal with remember me option enabled; how can i do this? is it possible?
Hello all My Dear Friends, My customer wants to have tacacs configured in ise . ISE details are as mentioned below. All pre-requisite of configuration has been done , but when i am creating and configure tacacs policy set it is giving error "failed t...
Hello, I'd like to share a couple of ideas for features I'd like to see in the next versions of ISE: as far as I know, they are not available, but feel free to correct me if I'm wrong! 1) Ability to modify Policy Sets via REST API: it is already p...
I know Im doing something wrong but have followed the documentation to the T. I can see pretty much everything except the soure/destination tcp port numbers. Even when using the "detailed" syntac it still doesn not appear. Heres my config & exampl...
We've got a couple work stations that are using wifi cards to access the network, and we'd like to place an exemption on them or something similar so that they don't have to go through the system scan to find compliance.Currently, it takes too long a...
Hello All, One of my client has a requirement that he needs to trigger auto remediation if the client enters the non-compliant rule. Is this possible?. Thanks
Hidoes MAR work on ISE 2.4. I have copy the working rules from ISE 2.2 MAR with PEAP(EAP-MSCHAP) and PEAP(EAP-TLS) into 2.4 but its not working. does anything get change in 2.4 my second question. ISE 2.2 if i change the windows wireless network se...
Hi , Can we integrate ISE with Aruba 7210 Controller for BYOD & guest provisioning features & Functionalities ? Vijay
Hi, I have a new ACS 5.3 configure and a ASA5550 to authenticate VPN users using a remote LDAP server. Once I try to authenticate the users with the ACS it gives me the error message "22056 Subject not found in the applicable identity store(s)."I che...
I'm not certain the exact IOS version these two commands were initially released in, but could we get them added to the configuration guides where they should have first appeared (maybe? 3.17.3/16.3.2/16.4). As of right now they are only mentioned w...
Hi:Team:Is there a way to use a sgt represent ip address is any ? After customer deployed the sda fabric , some acl just like deny ip 172.30.0.0 0.0.255.255 any can not change to sgaclHow we can use sgacl replace transitional acl which one th...
Hello TrustSec Experts-I have a customer that is interested in deploying TrustSec but most of their switches are the Industrial IE 2000/3000 models. According to the latest TrustSec bulletin (https://www.cisco.com/c/dam/en/us/solutions/collateral/ent...
I thought I would see if the community may a policy that works for the following. Configure concurrent mab and dot1x. So this is in the policy. event session-started match-all 10 class always do-until-failure 10 authenticate using dot1x prio...
