Network Access Control

Hey all,   Looking for  best practices on how security teams flag a BAD MACHINE (not user) and prevent it from connecting onto the network via VPN / Wired.   ** The idea is to block specific MACHINE not specific USER. ** User validated/authenticated ...

Our customer uses double authentication for ASA VPN with ACS as primary authentication using AD and ISE as secondary authentication using Safenet and RSA (both in one single identity source). They now want to move both primary and secondary authentic...

Hello All,   Can someone tell me what would be the reason if guest wireless redirection is taking long time.   We have setup ISE 2.3, patch 4, WLC 3500, 8.5 ver. AP 2800i   Thanks Kamlesh

Hi Team,   We have a customer that purchased ISE with one particular use case in mind.  They want to limit the number of devices a student can have to 1.  However, they don't want to limit the number of devices that a teacher or administrator can hav...

Hi board, Currently I try to understand the whole ISE replication stuff and stumbled upon the "endpoint attribute filter". As described in various CiscoLive slides (e.g. BRKSEC-3699), it is best practive to have it enabled and I do it all the time wi...

A customer is asking me about ISE VM storage performance requirements. The documentation states the following:   "The storage system for the Cisco ISE virtual appliance requires a minimum write performance of 50 MB per second and a read performance o...

hi all,   Do you know where I can find the ISE Best practices presentation document that was given at Cisco Live Orlando?   I tried ciscolive website but could not find any document based on the event or TEC ID? Any idea?   From the picture below, I'...

We currently have our ISE administrators using AD external identity sources to log into the servers however weve noticed that even with the super user setup we are unable to have full control. Is there something that can be done to allow AD admins to...

Hi Folks,Since ISE 2.1 ODBC connections are possible. We are about to figure out if we could use our SCCM database during MAB authentication of our desktop.It seems that only unnamed SQL Instances are allowed. Does anyone know if this is the case? If...

Hi there,   Is it possible to create posture conditions for applications that show as unclassified? From what I can see, it is not possible and I am unable to classify the applications manually.   Thanks,

Hello, I upgraded my ISE deployment to ISE 2.2 patch 11. I see that ISE 2.2 patch 11 has since been deferred.   What does Cisco recommend as the stable ISE 2.2 Patch release? Should we wait for Patch 12 or roll back to 9 or 10?    SEVT on Oct 7-13 re...

Hello ISE Techs,   I've recently had four ISE 2.4 patch 4 servers (VMs) setup and built in a distributed deployment, however, I've started experiencing problems with two of the ISE Servers. I cannot load the GUI for these servers - one is the Primary...

Hi Team, Do we have some document regarding which ISE version is supplied with which Microsoft Hyper-V integration services version? If Host integration services version is higher than a VM one Hyper-V throws a warning that such a setup is not suppor...

Hi    since ISE doesn't support authenticated mail setup, how does one go about integrating with a cloud mail provider like Office365? Does this involve having to whitelist an IP address on O365 Mail Server? And if so, I suppose that means whitelisti...