Network Access Control

Resolved! Query on pxGrid with TACACS?

In a small ISE deployment used for TACACS only, if it were to be integrated to Stealthwatch using pxGrid what if any useful information would be provided to Stealthwatch?

Resolved! 3750 802.1x authentication shows successful, however, Security status still shows "Unsecure"

This is 3750 switch running 12.2(55)SE9. Below is the output I am referring to: RJ3750#show authentication sessions session-id C0A80302000000040003BCF4 Interface: FastEthernet2/0/4 MAC Address: 00e0.db46.66f4 IP Address: Unknown User-Name: 00e0db46...

Endpoint group not found by REST API

Dear Cisco, We are in the process of upgrading ISE 2.0 to 2.2, we are also testing MAB as an alternative for Dot1x. When running the following GET function we encounter some problems in the output: https://.../ers/config/endpointgroup/ Only the f...

Resolved! Posturing and Compliance checks on Windows 10 Virtual Machine

We currently have a windows 10 VM running on an ESXi host (6.5.0 Build 4564106) that we're intending on using for 802.1X testing. We have a need to be able to recreate NAC issues remotely so we're trying to configure this VM as a normal wired client ...

ISE NAC Agent setup

Hello All, I am configuring ISE posturing in a virtual ISE 2.3. When the user is unknown the user should be directed to the portal to download the agent. When the user download the agent and try to install it, An error telling the user "Fai...

Resolved! When Primary PAN is Down,Whether BYOD support external CA or not？

Hi TeamIn below document, i see if primary pan down, BYOD couldn't support internal CA. I want to know ,When Primary PAN is Down,Whether BYOD support external CA? Features Available When Primary PAN is Down (Yes/No) Existing internal user RADIUS au...

ISE Profiling not working as expected | Windows 7 and Windows 10 clients are identified as "Microsoft-Workstation"

Hello, I am not able to get windows 7 and windows 10 machines to be profiled properly with ISE 2.3 patch 2. These endpoints are identified as " Microsoft-Workstation" all the time. I have enabled "RADIUS", "SNMP", "DHCP" , "NMAP" and "Active-Direct...

Resolved! Evaluation version of ISE 1.4

I am trying to get Evaluation version of ISE 1.4 OVA to study for SISAS exam. Can someone share? I am able to get the 2.4 but looking for the oldest one for the exam.Thanks,Yohannes

ACS Authentication Failure Codes

Does anyone know where I can find a link to the ACS Authen-Failure-Core table. A customer is running a SQL query from ACS but they are getting the code back instead of the description.Cheers

Resolved! MDM ISE policy getting stuck

We are implementing JAMF MDM on our campus. I have 2 policies one to check registration in the MDM and send unregistered devices to the MDM portal. The second policy allows the registered devices on to the network. Where I seem to be stuck is after t...

Resolved! ISE 2 node deployment - Monitoring Role question

Helloquick questionThe BRKSEC-3699 document recommends that in a two node deployment the Primary ISE node should have Admin and Monitoring as Primary, and the Secondary ISE node should have Admin and Monitoring as Secondary. I wonder whether it make...

Privilege levels , RADIUS and if-authenticated!

Hi, I was hoping to get some clarity on why my config behaves the way it does. I am configuring a priv level 7 for our support team to log into switches and clear port-security errors, shut/no shut ports . I want the authentication to use RADIUS. ...

Resolved! ODBC Support for two parameters to fetch attributes

Hi all,In my customer network we are rolling out DNAC with ISE (image version 1.1.6 and 2.3P2 respectively). Customer has more than 4000 projects with multiple ODCs under each project. As the scale limit of number of AuthZ policies are less than 600,...

Cisco ACS 5.3 unexpectedly restarting

Dear all, I wonder if anyone can assist with an issue affecting our ACS 5.3 VM appliance. Since around 23rd of March this year, our monitoring platform has noted that the VM is sporadically restarting. There does not appear to be any pattern to...

Resolved! to use DN instead of AD user logon name with rewrite rule..

hi alli want to ask about identity rewrite rule.in deployment, we are using ise 2.3 and we have integrated with AD and Stealthwatch pxGrid.AD userlogon name info consist from numbers . that's why, it seems this numbers on Stealtwatch as username. an...

Network Access Control

Forum Posts

Resolved! Query on pxGrid with TACACS?

Resolved! 3750 802.1x authentication shows successful, however, Security status still shows "Unsecure"

Endpoint group not found by REST API

Resolved! Posturing and Compliance checks on Windows 10 Virtual Machine

ISE NAC Agent setup

Resolved! When Primary PAN is Down,Whether BYOD support external CA or not？

ISE Profiling not working as expected | Windows 7 and Windows 10 clients are identified as "Microsoft-Workstation"

Resolved! Evaluation version of ISE 1.4

ACS Authentication Failure Codes

Resolved! MDM ISE policy getting stuck

Resolved! ISE 2 node deployment - Monitoring Role question

Privilege levels , RADIUS and if-authenticated!

Resolved! ODBC Support for two parameters to fetch attributes

Cisco ACS 5.3 unexpectedly restarting

Resolved! to use DN instead of AD user logon name with rewrite rule..

EAP-TLS Device Certificate for Entra Joined Devices with Intune

Posture assessment report never finishing

NetFlow Probe Profiling – Missing IP and Port in ISE Context Visibili

Default Route SGT

PX Grid Connector and Service NOW

ISE Profiling Conflict

Scenario ISE-Pri dead and promote ISE-Sec to Primary

can no longer ssh into the Primary Admin/Secondary MnT node

NTLM Disabled and ISE-PIC

Impact of Resetting ISE Context Visibility on Endpoint Connectivity