Hello Community, we want to reauthenticate our Endpoints. Which way is recommended? Set reauthentication at the Cisco ISE Authorization Profile or at the switch port? And which timers are best practice? We use ISE version 2.1. Thanks and best reg...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi dev team, Now my customer is considering specific admin user can access only some specific network user group. It could be achieved by admin authorization policy. (Administration -> Authorization -> Policy). It does work as expected, but when w...
Hi Team, I tested simple windows NSP process, and found the portal uses admin cert first then use portal cert like that. 1) The portal page shows admin cert first. (self-signed admin cert "admin.cert-test.com" is provided) 2) Then the portal pa...
Resolved! ISE Guest Captive Portal - Generic Guest user (unlimited devices, each device having a timeout)
I'm trying to get the ISE Guest Captive Portal working with a generic guest user. The username is "guest". We will be having many users using this generic user, so the number of devices needs to be unlimited. We are hoping to create a timeout for e...
Hello, I am trying to Bind CA Signed Certificate to the CSR generated for intermediate CA. The root ca is a Microsoft Server 2012R2 ISE is Version 2.3 When binding the certificate, i get the following error: Certificate does not comply with interme...
Hello, I am trying to Bind CA Signed Certificate to the CSR generated for intermediate CA. The root ca is a Microsoft Server 2012R2 ISE is Version 2.3 When binding the certificate, i get the following error: Certificate does not comply with interme...
Hi, I have integrated my cisco controller with ISE server 2.3 with Patch4 for AAA and Posture Scan, the issues when i connect new machine with SSID, the client provisioning is happening successfully, but the posture scan is not running as is is stu...
Do ISE maintain the updates for the WSUS or windows OS, patches? how? any documentation?
Resolved! ISE Small Deployment
Hi team, I had a question from a partner, "On a small/standalone (two node) deployment, What happens to primary PSN Service if primary PAN fails (but just the PAN Service) and you promote secondary PAN? " My understanding is on a small deployment w...
Resolved! Stable version between ISE 2.3 and 2.4
Hi, Currently we are running ISE 2.3 with patch 4 for device administration (TACACS+) feature only. We deploy as primary-secondary. Now, the ISE version 2.4 is available. Which one is stable between ISE 2.3 and 2.4? What would you recommend? Thank ...
Hey, folks. Yesterday I have hit one of these bugs (I guess CSCvf62998) on our deployment (ISE 2.2.0.470, Patch 6). The workaroud stated in the BugDetails doesn't do it either: Workaround:Change the timezone of the computer accessing the sponso...
I have an ISE 1.4 standalone in the ise I have an active directory configured. I did an authentication test to the active directory and the authentication was successful. I am also setting up a portal sponsor and the administrators of the portal spo...
Hi, Is it possible to have a setting on ISE such that a guest needs to start on the same day or his ID expires ? I looked at guest type settings but couldn't find anything related to this.
Resolved! ISE 2.3 and Social media Activation
hello allwhen i tray to add identite social media in ISE 2.3 patch 4, i get this message "socialLogin.Error while establishing connection against remote site: Social Login provider's root CA chain does not exist in ISE or exist but is disabled/expire...
