Network Access Control

Hi. I am testing out an IBNS 2.0 config on a 3850 switch running 03.06.04.E. Overall this is working great, but I am having one small issue with critical auth.    If I simulate an "all radius servers dead" situation, criticial auth basically works as...

I have a issue with dynamic VLAN assignment. I configured dot1X/mab authentication on 3750 cisco switch (Version Version 12.2(52)SE) for dynamic assigned vlan but when I pluged my laptop to switch port, I see auth and authz successful on Radius of Li...

Hi Experts,   There is this on going deployment and we got a requirement from the client, it focuses on: Generating reports based on the number of users that are in open mode and closed mode authentication. I check through the reporting in ISE, but I...

Hi All,   I am working on a SDA engagement and have a query regarding Oracle Access Manager (OAM).   The customer has vendors who brings their own laptops and access customer's network. The vendors laptops are not part of customer's AD. However they ...

 First Apologies if this is a duplicate. I thought I post it earlier, but I canot see it, so I guess I did something wrong.   I have a customer that needs to migrate ISE to a new PKI service using a process that has minimal service impact. I was wond...

Hi I deployed Cisco ISE 2.3 posture assessment,end user anyconnect is installed, everything in posture work fine but the problem is sometimes when user login ,  redirection to provisioning portal (for downloading anyconnect) occured and this massage ...

Hi All,   as SNS-3495 physical appliance announced EoL 2 years ago, just wonder if ISE 2.4 is officially supported on SNS-3495? or it's required to migrate to SNS-3595 instead?   thanks,CH

Hi,   I'm wondering if there is a way to determine administration persona role through an API call.   From a quick skim of the reference guide it seems you can do this for the monitoring persona role ( https://<ISEhost>/admin/API/mnt/Version ), but I...

Is it possible to do group mapping in ISE? I was able to do this in ACS and map an external AD group to an identity group when creating an access policy. Which would allow me to create a single authorization policy that would affect both internal and...

Hi Guys,   I to enable a WLC SSID with the following requirements:   1) Layer 2 security is open. 2) Then users will need to get redirected to a CWA wherein they need to enter their username PW 3) The logs should should should show their usernames as...

i have installed AnyConnect compliance module and posture condition related to Kaspersky installation and definition working fine with Kaspersky disabled on machine and when Kaspersky working on machine it stop compliance module from working while NA...