Network Access Control

Hi board, Currently I try to understand the whole ISE replication stuff and stumbled upon the "endpoint attribute filter". As described in various CiscoLive slides (e.g. BRKSEC-3699), it is best practive to have it enabled and I do it all the time wi...

A customer is asking me about ISE VM storage performance requirements. The documentation states the following:   "The storage system for the Cisco ISE virtual appliance requires a minimum write performance of 50 MB per second and a read performance o...

hi all,   Do you know where I can find the ISE Best practices presentation document that was given at Cisco Live Orlando?   I tried ciscolive website but could not find any document based on the event or TEC ID? Any idea?   From the picture below, I'...

We currently have our ISE administrators using AD external identity sources to log into the servers however weve noticed that even with the super user setup we are unable to have full control. Is there something that can be done to allow AD admins to...

Hi Folks,Since ISE 2.1 ODBC connections are possible. We are about to figure out if we could use our SCCM database during MAB authentication of our desktop.It seems that only unnamed SQL Instances are allowed. Does anyone know if this is the case? If...

Hi there,   Is it possible to create posture conditions for applications that show as unclassified? From what I can see, it is not possible and I am unable to classify the applications manually.   Thanks,

Hello, I upgraded my ISE deployment to ISE 2.2 patch 11. I see that ISE 2.2 patch 11 has since been deferred.   What does Cisco recommend as the stable ISE 2.2 Patch release? Should we wait for Patch 12 or roll back to 9 or 10?    SEVT on Oct 7-13 re...

Hello ISE Techs,   I've recently had four ISE 2.4 patch 4 servers (VMs) setup and built in a distributed deployment, however, I've started experiencing problems with two of the ISE Servers. I cannot load the GUI for these servers - one is the Primary...

Hi Team, Do we have some document regarding which ISE version is supplied with which Microsoft Hyper-V integration services version? If Host integration services version is higher than a VM one Hyper-V throws a warning that such a setup is not suppor...

Hi    since ISE doesn't support authenticated mail setup, how does one go about integrating with a cloud mail provider like Office365? Does this involve having to whitelist an IP address on O365 Mail Server? And if so, I suppose that means whitelisti...

Hello, I'm trying to add admin users to ISE Web Interface. These users already exist in Active Directory I don't have access to AD groups, so I want to add users as single entries, not as assets from an AD group. I want to have control on the new use...

A customer of mine has a deployment with approx 10k active devices.  Some of the medical devices with static IP addresses are not profiling beyond the ethernet vendor code.  Some of these devices share the same ethernet NIC vendor and it is hard to d...

Is it possible to copy individual policies between policy sets in ISE 2.4? I could do this in ISE 2.1 and ISE 2.2, but I am not seeing the feature.      Thanks,   Rob 

Team,   I am working with one of the Banks in India. They are running dot1x and posture on windows endpoints and IP Phones are getting authenticated using MAB. Edge switches are not PoE and IP Phones get power through power adapter. We are facing cha...