Customer has some administrator modified and created policies on the profiling policies on ise. When we export the profiling policy list, we see some duplicates of the policies. Importing the same list back on ise does not reflect the duplicates on t...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! ISE 2.0.0 support for Cat 9300/9400/9500
I am trying to find if ISE 2.0.0 works with the newer Catalyst 9300/9400/9500. I see here:https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/compatibility/ise_sdt.html#pgfId-223240that Catalyst 9000 Series Switches are validated with Cisco ISE, ...
Hi,i have to calculate a Migration from a ACS Server(Cluster) Version 5.4 to Cisco ISE.How can the customer extract the number of Policys and rule sets(for example in an Excel sheet) to help us to get an overview about the installed configuration! We...
If an organisation has 2 ACS VMs, with the following licenses:Product NumberProduct DescriptionCSACS-5-BASE-LIC^Cisco Secure ACS 5 Base LicenseCSACS-5-BASE-LIC^Cisco Secure ACS 5 Base LicenseDo the part numbers above require a separate support contra...
I have an open TAC and it looks to be an issue with the secondary node loosing TACACS logging after 3 weeks of uptime.Anyway, they are still looking into it, but I think I may have to reformat the server. If I deregister it, will that cause a reboot ...
Resolved! Cisco ISE 2.2 or 2.3 endpoint management
I am working with an agency that uses MAC Auth on radius servers that use AD as an identity store. We plan on moving them to ISE but I am looking at a better way to store their MAC addresses, preferably in ISE. I just went through and did an import...
Team, I have a customer that needs to gain visibility in their Windows Servers to check for Windows Wanna Cry Patch existence. I know the Windows Server operating system isn't supported but is this on roadmap to be supported as in Fore-scout supports...
Resolved! upgrade to 2.3 or 2.4
HiCurrently on 2.2 patch 7 in a deployed environment, have an open TAC case, but I think they are going to come back and say will need to rebuild from scratch due to a possible corruption.With that in mind what are peoples experiences with 2.3 & 2.4,...
Hi everyone. I know there are issues with the TCP Dump section of the troubleshooting menu in ISE 2.2, specially with Flash. I've been trying several Firefox and Chrome versions with no avail. I'd like to know if any of you guys know of a combina...
Resolved! Certificate templates for EAP-TLS
Hi,Are there recommended user and device certificate templates, the ones used in Windows CA for example. I have seen diffrent ways of doing it - diffrent values for SAN field for example. The reason I ask is that I am wondering how the device group m...
Resolved! ISE and VMWare VADP support
Hi,Quick question: is it possible to use WMware VADP to backup ISE Guests (on a ISE virtual appliance)?As far as I know we can only use ISE backup system, I couldn't find any reference to VADP.Thanks much,Marcello
Hello Everyone, We are integrating Cisco ISE in new environment to use radius AAA Services (dot1x, MAB...). When we connect a windows domain machine to the network on a dot1x port, an Outlook Security Alert "Untrusted Server Certificate" appears....
Does ISE integrate with KasperSky Endpoint? If yes I need more details
Resolved! Attributes exchanged with Airwatch
Hello, I have a customer looking at integrate with Airwatch for DMD, and would like to know if we can exchange the following attribute: "Airwatch Enrollment OG".I did not see it mentioned, so I guess not, but I just wanted to double heck before going...
Hello Security Community,Here is the following scenario (high level),- Guest wireless network which only has access to DMZ resources - DNS resolution and load-balancer. Guests have separate Internet connection.- DMZ which contains DNS servers and loa...
