I have moved some APs from 5508 WLC Primary to Secondary and APs has joined on the controller. Users are able to authenticate via ISE but Authorization is failing. What could be the issue, please help.
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! ISE PEAP & Certificates on one SSID
Can you please advise if it is possible to allow acceptance of both certificates and PEAP credentials on a single Wireless SSID? If so, can you please point me to any documentation on how to do this within ISE?
Resolved! ISE Guest Portal over NAT
Hi,Does ISE support accessing guest portal/sponsor portals over NAT ?If Yes, could you please let me know any other design concens?Thank you,Itaru
Have 2.3 latest patches. Have requisite Base and APEX licensing on the ISE side. Do we require AnyConnect APEX also for the Windows clients? The licensing guide only states you need the ISE APEX licensing.
Resolved! Apex license requirement with MDM
Are there any MDM use cases where an Apex licences would be required?
Hello , We have a Cisco ISE deployment with 2 PANs and 4 PSNs . We have AD Integration with 3 AD that are not two-way trust , they have no trust or one-way trust between them . We have an auth policy that have the condition of was-machine-authentic...
Reason : This is an upgrade of 2 x old ACS in standalone mode that had EOS. We propose 2 X ISE in HA mode for replacement. My customer would like to minimize changes of other peer system changes like OTP server, AD, SMS… My Setup info : 2 X ISE ap...
Resolved! ISE default trusted CA certificates
Hi all, in ISE 2.4 i see the following enabled default CA certificates in the trusted store for infrastructure and endpoint trust: Root: Cisco Root CA M2 / Intermediate: Cisco Manufacturing CA SHA2 Root: DigiCert root CA / Intermediate: DigiCert SHA2...
Hello, We've managed to integrate ISE 2.4p3 with SCCM 1806 (we installed 1802 and then updated to the latest release 1806) but, regardless of the compliance status of the endpoints in SCCM, the return MDM.DeciveCompliantStatus is always NonComplian...
Hi Experts, In my quest to integrate the third party vendors switches with ISE, I have not started working with the Juniper switches. The specs are as follows,Juniper 4200EX with JunOS 15.1R7.8 integrating with ISE ver 2.3 AnyConnect 4.5.04.029 The i...
Resolved! ISE recommeded release and patch?
Hi all, My customer just acquired ISE to be used as TACACS+ authentication (2 PAN/Mnt + 2 PSN) in two new data centers. Which ISE version and patch are now the recommended ones? ISE 2.4 is long term, but I've seen a catastrophic bug (CSCvm93698) ...
Hi everyone, New deployments include default secure syslog and UDP syslog categories. 1) If I'm interested in central logging to my MnT, can these remote syslog targets be unapplied to all logging categories? I would like the only remote syslog t...
Hi Experts,I am a newbie in ISE and having problem in my first step in authentication. Please help.I am trying to deploy a standalone Cisco ISE 1.1.2 with WLC using 802.1x authentication. The user authentication configured to be checked to ISE's inte...
Dears,Am working on ISE 1.1, and am facing a problem after the posture assessment for a machine, if the machine doesn't have the correct antivirus, the NAC Agent suggest the following link remediation: http://kaspersky.test.com, when the user tries t...
Resolved! Cisco ISE integration with AD
Hi All! I have a problem between Cisco ISE and Active Directory. After adding AD to Cisco ISE I have a Failed Status in Active Directory Diagnostic Tool, rest of test is working good. Test result: DNS A record high level API query ...
