We have multiple site ISE 2.2 environment and are adding 2 new sites. Our current ISE License is; 50000 Base 3500 Plus. I am trying to find a way to determine how many new plus licenses we may need. In the past we have temporarily gone over the 3...
A customer of mine wants to create bypass filter list under collection filter via API. Eg. Bypassing Suppression via API etc. Is there an API support for it ?
Hi experts, Is it recommended if I restore Configuration Data (EXCLUDING ADE-OS) to a Primary PAN that's part of 12-node brand-new deployment? Or, It would be the best to do this while this primary PAN is still in its standalone mode or primary mod...
I'm placing two SNS-3515, one to be configured in HA mode. Do I have to double the number of Base licenses for the second HA server? Or are both active at the same time and one takes over when the other one fails? Please advice. Thank you.
Hi Forum. I cannot get my HP printers to be profiled correctly as HP Laser Jet XX model. I have enabled DHCP, SNMP Trap & Query, Radius profiling services. My HP Printers are profiled as "HP-Device". Is there any way to profile HP printers as the ori...
Hi I am using split authentication / authorization in a ravpn setup (ASA used to terminated the VPNs). Authentication is done by a third party software using SAML and Authorization done by ISE. The SAML IdP in question has no RADIUS interface. As...
Hi Is it possible to access from a network behind a Cisco ASA Firewall Lan Interface to its own public IP Interface. Eg User 10.1.1.100/24 ------------10.1.1.1/24 : LAN FW PUB : 1.1.1.1/32 Is it possible that the user (10.1.1.100) can access ...
Customer needs to know what are the best practices for not only patching ISE itself, but the underlying RHEL kernel should there be a CVE that needs to be patched for RHEL by their Linux Admin. The understanding is that Cisco will not provide the RHE...
I have been working on setting up multi factor authentication using radius. I first tried to use Duo Auth Proxy with little success. We were trying to use ISE as the primary radius authenticator https://duo.com/docs/radius. What I would like to tr...
I was wondering how to determine what version of the AnyConnect client to be downloaded on a machine when connecting to VPN. I have our ASAs integrated with ISE. Is it on the ISE side or the ASA side? I apologize if this is a stupid question for the ...
Hi ISE experts, I'm working in a SDA project and my customer, Italian Broadcaster, wants to use ISE with external AD. They raised us a question: what happen if external AD fails while ISE is running properly? Is ISE able to cache AD DB, synchroniz...
Hi All Is there any way to prevent Mac spoofing with ISE CWA guest access by cookies etc? Concern: If someone learns an authenticated guest's MAC address, he can spoof this MAC and connect to the SSID without authentication before session timeout. ...
Hi, My customer has two ISE clusters. The first one is dedicated to wifi guest access while the second one is handling wired 802.1x for corporate users. They would like to provide guest access to their wired users. They are thinking of using RADI...
Another request related to guest portal, my customer (still the same) would like to tweak their ISE portals by adding some extra pages to provide support/training to their users. I don't think this is something we would support. I've explored the ISE...
Hi there, I've implemented a remote access VPN with AnyConnect and applied posture. The ASA group policy is configured in ISE (external group policy). As you may know, when using external group policies it is necessary to create a local user in ISE...
