Network Access Control

Change DNS server on Cisco ISE 1.4

Hello I'm running a Cisco ISE 1.4 configured with a DNS server that I need to change. I can't find with GUI or CLI how to find the setup to change the IP of the DNS server. Thanks

Resolved! The Secondary MNT node got promoted to Primary without manual intervention

The Secondary MNT node got promoted to Primary without manual intervention. This is the second time this will happen. We had to manually intervene to revert the nodes to their former statuses. We need to understand what event triggered this. Please...

Resolved! DACL issue on WLC flexconnect AP clients

Just wanted to ask if DACL is working for Cisco WLC with APs configured as flexconnect. I am doing POC for ISE posture and was able to have the ISE posture work with redirection while unknown and the scan, but the problem is that after posturing - se...

NEAT with Interface Template question and authentication issue

Hi guys, I am currently struggling with authentication of an IE switch and the implementation of interface templates.. We're using .1X on all of our access ports with static port configuration including auth hostmode multi-domain as we use Cisco ph...

ISE 1.3 HA secondary CPU high load average

I have cluster ISE topology. This HA is primary and secondary node. This problem happen in secondary node. The secondary don't have Auth traffic. But CPU unexpected CPU high load average. What can I find the root cause on cpu high time?

Integration with IBM Qradar through PxGrid

Hi team, I am doing the ISE 2.4 POV with the requirement to integrate with IBM Qradar through PxGrid with this script: based on the malicious host information on the dashboard, the Qradar will work with ISE to quarantine/shutdown... to these host. ...

Integrate with PaloAlto FW through PxGrid

Hi bros, I am working on ISE POV with the requirements below: - Our customer is using PaloAlto FW and they request us to demo the integration between ISE 2.1 and their current PAN through PxGrid. I have no experience with this deployment before s...

Resolved! ISE Posture redirect wireless issues.

Hi All, We are doing a POC for the ISE Posture on Wireless with WLC-AP setup as flexconnect. I created SSID to test the ISE posture and followed sample on the below links. https://www.cisco.com/c/en/us/support/docs/security/identity-services-engi...

ISE Wired Guest VLAN Assignment

Hi All, I'm looking for some advice on the best method to assign VLAN IDs for wired corporate devices and wired guest devices. As far as I can see, I have two options: 1) Assign the guest VLAN as the native VLAN on all access switchports and let ...

ISE Authorization faild on Wireless

I have moved some APs from 5508 WLC Primary to Secondary and APs has joined on the controller. Users are able to authenticate via ISE but Authorization is failing. What could be the issue, please help.

Resolved! ISE PEAP & Certificates on one SSID

Can you please advise if it is possible to allow acceptance of both certificates and PEAP credentials on a single Wireless SSID? If so, can you please point me to any documentation on how to do this within ISE?

Resolved! ISE Guest Portal over NAT

Hi,Does ISE support accessing guest portal/sponsor portals over NAT ?If Yes, could you please let me know any other design concens?Thank you,Itaru

Resolved! Cisco ISE with Threat Centric NAC - licensing

Have 2.3 latest patches. Have requisite Base and APEX licensing on the ISE side. Do we require AnyConnect APEX also for the Windows clients? The licensing guide only states you need the ISE APEX licensing.

Resolved! Apex license requirement with MDM

Are there any MDM use cases where an Apex licences would be required?

Resolved! Cisco ISE 2.3 Patch 5 - User name change detected for the session. Attributes for the session will be removed from the cache

Hello , We have a Cisco ISE deployment with 2 PANs and 4 PSNs . We have AD Integration with 3 AD that are not two-way trust , they have no trust or one-way trust between them . We have an auth policy that have the condition of was-machine-authentic...

Network Access Control

Forum Posts

Change DNS server on Cisco ISE 1.4

Resolved! The Secondary MNT node got promoted to Primary without manual intervention

Resolved! DACL issue on WLC flexconnect AP clients

NEAT with Interface Template question and authentication issue

ISE 1.3 HA secondary CPU high load average

Integration with IBM Qradar through PxGrid

Integrate with PaloAlto FW through PxGrid

Resolved! ISE Posture redirect wireless issues.

ISE Wired Guest VLAN Assignment

ISE Authorization faild on Wireless

Resolved! ISE PEAP & Certificates on one SSID

Resolved! ISE Guest Portal over NAT

Resolved! Cisco ISE with Threat Centric NAC - licensing

Resolved! Apex license requirement with MDM

Resolved! Cisco ISE 2.3 Patch 5 - User name change detected for the session. Attributes for the session will be removed from the cache

Bulk Update Fails for customAttributes - Is it supported?

UserPrincipalName not showing in ISE Log for certain user

CISCO NAM installation by iso generated by System Center

can i USE 2 CISCO ISE posture policy in same time with 2 Anti malware

High Response time for Entra ID TEAP with ISE

ISE VM Smartnet

ISE 3.5 requests for SMB Version 2 from Active Directory

SSL VPN FOrtigate with Cisco ISE Posture

Certificate Services OCSP Responder nearly expired

ISE databases - which one has the endpoints?