Hi experts, Is it recommended if I restore Configuration Data (EXCLUDING ADE-OS) to a Primary PAN that's part of 12-node brand-new deployment? Or, It would be the best to do this while this primary PAN is still in its standalone mode or primary mod...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
I'm placing two SNS-3515, one to be configured in HA mode. Do I have to double the number of Base licenses for the second HA server? Or are both active at the same time and one takes over when the other one fails? Please advice. Thank you.
Hi Forum. I cannot get my HP printers to be profiled correctly as HP Laser Jet XX model. I have enabled DHCP, SNMP Trap & Query, Radius profiling services. My HP Printers are profiled as "HP-Device". Is there any way to profile HP printers as the ori...
Hi I am using split authentication / authorization in a ravpn setup (ASA used to terminated the VPNs). Authentication is done by a third party software using SAML and Authorization done by ISE. The SAML IdP in question has no RADIUS interface. As...
Hi Is it possible to access from a network behind a Cisco ASA Firewall Lan Interface to its own public IP Interface. Eg User 10.1.1.100/24 ------------10.1.1.1/24 : LAN FW PUB : 1.1.1.1/32 Is it possible that the user (10.1.1.100) can access ...
Resolved! ISE Patch vs RHEL Patch
Customer needs to know what are the best practices for not only patching ISE itself, but the underlying RHEL kernel should there be a CVE that needs to be patched for RHEL by their Linux Admin. The understanding is that Cisco will not provide the RHE...
Resolved! Using on premise Azure with ISE 2.2
I have been working on setting up multi factor authentication using radius. I first tried to use Duo Auth Proxy with little success. We were trying to use ISE as the primary radius authenticator https://duo.com/docs/radius. What I would like to tr...
I was wondering how to determine what version of the AnyConnect client to be downloaded on a machine when connecting to VPN. I have our ASAs integrated with ISE. Is it on the ISE side or the ASA side? I apologize if this is a stupid question for the ...
Resolved! ISE and AD integration
Hi ISE experts, I'm working in a SDA project and my customer, Italian Broadcaster, wants to use ISE with external AD. They raised us a question: what happen if external AD fails while ISE is running properly? Is ISE able to cache AD DB, synchroniz...
Resolved! ISE CWA MAC spoof
Hi All Is there any way to prevent Mac spoofing with ISE CWA guest access by cookies etc? Concern: If someone learns an authenticated guest's MAC address, he can spoof this MAC and connect to the SSID without authentication before session timeout. ...
Resolved! Radius proxy for guest
Hi, My customer has two ISE clusters. The first one is dedicated to wifi guest access while the second one is handling wired 802.1x for corporate users. They would like to provide guest access to their wired users. They are thinking of using RADI...
Another request related to guest portal, my customer (still the same) would like to tweak their ISE portals by adding some extra pages to provide support/training to their users. I don't think this is something we would support. I've explored the ISE...
Hi there, I've implemented a remote access VPN with AnyConnect and applied posture. The ASA group policy is configured in ISE (external group policy). As you may know, when using external group policies it is necessary to create a local user in ISE...
Resolved! Issues in PEAP Authentication--Cisco ISE
Dear Community, We are facing issues in the below setup. PEAP clients--} WLC ---Cisco ISE---AD MSCHAPv2 We have used Private CA certificates to all our loc...
Hi, Im using Cisco ISE for 802.1x authentication. Win10 computers are connected on Cisco 2900series switch. Cisco ISE regularly asks for re-authentication of computers (normal behavior) Each time that occurs, the network breaks for a couple of se...
