I have a lab ISE server which I am using to develop API clients. Originally that server had a large number of endpoints configured which I deleted using the web UI when I started using it.I have just been working on code to replicate the web UI Expor...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Dear community,I have a wired ise guest pc(Windows 11,non domain) disconnecting from the network after idling for about 5mins, then the pc needs to sign in to guest portal to gain back access.From the show auth sessions int(below), you can see the Ip...
Resolved! Use aaa for enable prompt?
Hello,Currently, I dont know how to have many users with different password. My switches are 2960-S.aaa configuration:aaa new-modelaaa authentication login default localuser:username scd privilege 15 secret 5 $1$username opst privilege 15 secret 5 $1...
Resolved! run PSN and PXGRID on the same node
i have and ISE 3.2 deployment with:2 administration nodes 2 Monitoring nodes 6 PSN Is it posible in this case to enable the pxgrid persona on the PSN? because where going to integrate a DNA Center to the ISE, and the DNA Center is going to be on the ...
I'm trying to understand the purpose of the "Application Condition" as part of the posture process. In this case i want to ensure that Anti-Malware is installed and running before passing posture and releasing the endpoint into the network. To mock...
Resolved! Passive Identity Agent error
ISE PIC Agent does not return any user/IP to ISE, keeps getting this error in CiscoISEPICAgent file:022-09-26 01:10:29,053 ERROR - Rest Client, Error sending mapping {user=dummyMapping, ip=192.168.12.32} to https://S-CISCOISE02.domain.local:9095 : St...
Trying to identify the best way to authentication and authorize Apple endpoints on a Wired interface to Cisco ISE.Environment:1. Macs are AD bound2. Macs are managed via Jamf3. There is NO local computer certificate4. Users log into macs with a PIV c...
Since 3.x upgrade I can see on the main home dashboard the widget "System Summary" displays only 1 node.Is there any native way to display multiple nodes at once? Any report?Is there any way how to get the data out for external tools like Grafana / S...
I had a bit of a surprise making some changes to our planned NAC setup, and I want to make sure this is not a bug and is an expected behavior. It's great if this is "normal".We have 9200L access switches and ISE 3.1 in place. The switch ports use d...
It all started with us manually renewing the admin password of a few ISE nodes starting with a couple indipendent nodes, we used the "password" command in order to renew the cli password and everything works fine. then we tried renewing a few others...
Resolved! Purge Endpoint everyday
Hi, currently I configure the purge policy to execute everyday at 0300. I would like to know how to configure the " condition" in order to meet the requirement to purge everyday.My intention is to let the self register Guest and sponsored guest ever...
Resolved! ISE 3.2 save configuration in CLI
This is sort of silly, but is there not a way in ISE 3.2 to save the configuration of changes made via CLI? Example: changing a local user via CLI on 3.2 patch4, I am not presented with a way to "write mem" or "copy run start" to save the configurati...
Hello, I'm trying to implement Posture using Secure Client module in latest version. As there is no automatic remediation to force the update of our anti-malware solution, I wanted to test a power shell script. So I created a .ps1, signed with a co...
I want to extend the storage period of the report. I know you can extend the duration of the Data Retention Period to the settings of ise but You should also consider the capacity of the database utilization. So, in order to increase the capacity...
Setting up stmp to receive alarm by mail. If there are various alarms in ise, but you only use tacacs authentication High Load Average High Disk I/O Utilization High Authentication Latency And so on Is it necessary to receive all of these things?
