I am testing 802.1x (with EAP-TLS + ISE) for Cisco Phones. Planning on using the MIC (Manufacturer Issued Cert) for authentication. Going through the resources available on the web, they all seem to suggest that, in addition to the following 3x Cer...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! Posture - File Check
Hi, I am creating a "File Condition" requirement and facing unexpected behaviour. I am using "FileExistense" in "User_Profile" for Windows 10. By the default, Windows user profiles directory is C:\Users\%username%, where %username% is the username ...
require help on creating ise windows posture condition with older of 30 days
I have a customer that is migrating from an existing external CA to a new external CA. They're currently using their existing CA for EAP-TLS and they want to add the new CA to ISE, so essentially authenticate with both CAs during the migration. Can...
Dear Team, I would like to check if we can integrate OIM with ISE for SDA and what are the limitations. Can we write an API to call OIM rest API and built a separate SQL sequel database and then integrate it on ISE? Or do we have any connector? I...
Within the TACACS module of ISE 2.2: Work Center - Device Administration - Network Resources - Network Devices On this page "Column Display" filter contains the two built in root NDGs Location and Type. We have added a couple of other root NDGs ...
Any websites or suggestions on who owns and Administers ISE? It seems that network should own it and security get reporting from it, but should security be able to write policy's in in directly?
Resolved! ISE certs types
Hello, what kind of cert ls is needed on ISE for the following: 1-Guest Portal: wildcard publicly signed cert with the wildcard present in the CN and the hostname as one of the SANs? 2-EAP-TLS: issued by an internal CA? How should the cert be str...
Hi everyone,I have a Cisco Switch 2960. With 2 vlan : vlan 195 : DATA : From f0/1 to f0/24 vlan 14 : VOICE : From f0/1 to f0/24 I config on Switch as below : enable config terminal no ip domain lookup lin con 0 logg syn exit logging console informati...
Has anyone done 2 factor authentication for Cisco ASAs? I am working on a solution for setting up 2 factor authentication to access the management interface of a cisco asa. We have cisco ISE that we can leverage for this. My question is has this b...
Hi, We have realized that authenticated users remain indefinitely authenticated. There is no type of timeout that closes the session. We have configured the reauthenticacion for 30 minutos but the users remain permanent.Why is not the timeout worki...
Hello, I was curious what the aaa command is that would allow local login via ssh in the event of an ISE failure. Currently I have the following on my Nexus routers/switches: aaa authentication login default group ISE aaa authentication log...
This is for ISE 1.3+do you know if it's possible to remove the Device registration status from the MyDevices portal (ISE 1.4)? By default the status is displayed (Registered/Pending). My Customer wants to get rid of this column in general:
Hello Team,Customer wants to use "ISE-2.4.0.357-virtual-SNS3595-Medium-1200GBHD-64GBRAM-16CPU.ova" (SNS3595 spec) and deploy it. They want 1.2 TB of hard drive space. According to the ISE installation guide, they should build from ISO if they want to...
HelloIt appears that our production ISE 2.3 patch 1 has had this error for a few months and it's gone unnoticed. It says to contact the TAC and I have done some searches. Apparently the resolution is to runapplication configure iseSelect option 7 t...
