Network Access Control

Hi,   we have a requirement to create multiple custom header on ISE PIC in order to parse different types of syslog messages. But when I click on the "create custom header" button, it shows me the old header I had created.   Is there a way I can crea...

All,   I have a situation where my customer wants to do dot1x machine authentication, but the corporate machines don't (and won't) have certificates signed by their root/intermediate CAs, which signed the ISE certs. The reason is that their CA issues...

Hello, I have a customer that intend to have a distributed deployments in several regions. Each region will have a group of 2 PSNs. They want to delegate admin per region. So i want to understand down to which level can we delegate the admin right; P...

HiI am unable to figure out how to enrich the Access-Reject reply with additional Radius attributes in a particular use case - I am looking up the Guest User identity store and if the user is disabled then I want to return a custom Reply-Message to t...

Hi,   Is it possible to configure any posture policy to detect and prevent connection of endpoints Dual-Homed. We would like to have a solution with a temporal agent for posture to prevent Dual-Homed stations connected to network. Any suggestion ?   ...

Hi,   I am under consideration of enabling profiling along with dot1x in our enviroment. However i have couple of questions regarding how actually profiling would work.   What are protocols allowed before 802.1x authentication. Are they CDP, STP, EAP...

Looking for a best practice or reference guide to share with a customer regarding centralized vs. distributed PSNs.  The closest guidance that I've found is from the Cisco ISE For BYOD And Secure Unified Access book.  Thank you!

Hi!   This discussion and doc show how Microsoft SCOM could monitor the hardware ISE nodes: https://community.cisco.com/t5/policy-and-access/ise-management-pack-for-system-center-operations-manager-2012/td-p/2464102 https://www.cisco.com/c/en/us/td/d...

Guys, I have a laptop domain managed and I'm deploying Cisco ISE 2.4 on the network. The laptop is connected to a Catalyst 9300 switch. I'm running Wireshark instance on the laptop. I noticed the laptop send the EAPOL-Start packet three times with no...

Hi all,   We have a customers who wants to use profiling of 2802I AP´s in ISE. But it appears there is a difference between real life CDP info on switches compared to what we provide on profiling feed.   CDP info gathered on switch: 800 AP cdp info f...

Hi,   Can anyone tell me if it's possible to have a guest user enter an email address on the Guest Portal page when they accept the AUP? The customer wants the guest SSID to be open with no authentication, however would like to prompt for email addre...

Hi!   I have a question regarding the capabilities of PXGrid 2.0 and whether or not they will be able to meet the requirements of an upcoming customer project, or if we will need to utilize PXGrid 1.0.     The customer has chosen to use forescout as ...

The advisory states that this latest vulnerability is addressed with 2.2 patch 12.   Any date for when the patch will be posted?

Hello, I'm working on an ISE deployment and I have couple of issues that I'm encountering. Maybe someone have see similar issues before.    1-All of a sudden certain windows machines stop doing dot1x and revert to MAB until a GPO update is forced, or...