Network Access Control

Hi All,   I am working on a SDA engagement and have a query regarding Oracle Access Manager (OAM).   The customer has vendors who brings their own laptops and access customer's network. The vendors laptops are not part of customer's AD. However they ...

 First Apologies if this is a duplicate. I thought I post it earlier, but I canot see it, so I guess I did something wrong.   I have a customer that needs to migrate ISE to a new PKI service using a process that has minimal service impact. I was wond...

Hi I deployed Cisco ISE 2.3 posture assessment,end user anyconnect is installed, everything in posture work fine but the problem is sometimes when user login ,  redirection to provisioning portal (for downloading anyconnect) occured and this massage ...

Hi All,   as SNS-3495 physical appliance announced EoL 2 years ago, just wonder if ISE 2.4 is officially supported on SNS-3495? or it's required to migrate to SNS-3595 instead?   thanks,CH

Hi,   I'm wondering if there is a way to determine administration persona role through an API call.   From a quick skim of the reference guide it seems you can do this for the monitoring persona role ( https://<ISEhost>/admin/API/mnt/Version ), but I...

Is it possible to do group mapping in ISE? I was able to do this in ACS and map an external AD group to an identity group when creating an access policy. Which would allow me to create a single authorization policy that would affect both internal and...

Hi Guys,   I to enable a WLC SSID with the following requirements:   1) Layer 2 security is open. 2) Then users will need to get redirected to a CWA wherein they need to enter their username PW 3) The logs should should should show their usernames as...

i have installed AnyConnect compliance module and posture condition related to Kaspersky installation and definition working fine with Kaspersky disabled on machine and when Kaspersky working on machine it stop compliance module from working while NA...

Hello Experts,    I have a requirement to have the Vmware ESXi device administration facilitated through the AD account (AD is added in "joint point name" in ISE).   How can we get this facilitated?    

One of my customers is using ISE and Aruba wireless.  The Aruba wireless is broadcasting a Eduroam SSID.  They are having issues with students authenticating to the Eduroam SSID.  Below is the description of the issue:   "The problem is in the user a...

Hi,   I am a bit annoyed that ISE doesn't report what is wrong when it is unable to retrieve an AD group.  I have different branches in my AD tree, but ISE is only able to retrieve groups from one of them. For example it can find groups under domain/...