Hi, I am a bit annoyed that ISE doesn't report what is wrong when it is unable to retrieve an AD group. I have different branches in my AD tree, but ISE is only able to retrieve groups from one of them. For example it can find groups under domain/...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
ISE 2.3.0.298 External Sources: AD Mode: Monitor MAR: On (12hrs) Cisco Phones-EAP Switches: Correctly Configured per Interface Policy: Authentication: EAP-TLS - Network Access·EapTunnel Equals TTLS - Use Sequence (Internal Endpoints, AD) ...
Hi Team, I'm testing to issue certificates for EAP-TLS, and found expiration TTL is always set to 2 years for server cert. When I configured certificate templates for client cert, I could set 3652 days at maximum. But when I configured CSR for ...
Resolved! Hits count policy on ISE
Is there anyway to keep the hits count on all active policy? After a reboot the accumulated counts are gone.
Resolved! Determining ISE Plus Licenses Needed
We have multiple site ISE 2.2 environment and are adding 2 new sites. Our current ISE License is; 50000 Base 3500 Plus. I am trying to find a way to determine how many new plus licenses we may need. In the past we have temporarily gone over the 3...
A customer of mine wants to create bypass filter list under collection filter via API. Eg. Bypassing Suppression via API etc. Is there an API support for it ?
Hi experts, Is it recommended if I restore Configuration Data (EXCLUDING ADE-OS) to a Primary PAN that's part of 12-node brand-new deployment? Or, It would be the best to do this while this primary PAN is still in its standalone mode or primary mod...
I'm placing two SNS-3515, one to be configured in HA mode. Do I have to double the number of Base licenses for the second HA server? Or are both active at the same time and one takes over when the other one fails? Please advice. Thank you.
Hi Forum. I cannot get my HP printers to be profiled correctly as HP Laser Jet XX model. I have enabled DHCP, SNMP Trap & Query, Radius profiling services. My HP Printers are profiled as "HP-Device". Is there any way to profile HP printers as the ori...
Hi I am using split authentication / authorization in a ravpn setup (ASA used to terminated the VPNs). Authentication is done by a third party software using SAML and Authorization done by ISE. The SAML IdP in question has no RADIUS interface. As...
Hi Is it possible to access from a network behind a Cisco ASA Firewall Lan Interface to its own public IP Interface. Eg User 10.1.1.100/24 ------------10.1.1.1/24 : LAN FW PUB : 1.1.1.1/32 Is it possible that the user (10.1.1.100) can access ...
Resolved! ISE Patch vs RHEL Patch
Customer needs to know what are the best practices for not only patching ISE itself, but the underlying RHEL kernel should there be a CVE that needs to be patched for RHEL by their Linux Admin. The understanding is that Cisco will not provide the RHE...
Resolved! Using on premise Azure with ISE 2.2
I have been working on setting up multi factor authentication using radius. I first tried to use Duo Auth Proxy with little success. We were trying to use ISE as the primary radius authenticator https://duo.com/docs/radius. What I would like to tr...
I was wondering how to determine what version of the AnyConnect client to be downloaded on a machine when connecting to VPN. I have our ASAs integrated with ISE. Is it on the ISE side or the ASA side? I apologize if this is a stupid question for the ...
Resolved! ISE and AD integration
Hi ISE experts, I'm working in a SDA project and my customer, Italian Broadcaster, wants to use ISE with external AD. They raised us a question: what happen if external AD fails while ISE is running properly? Is ISE able to cache AD DB, synchroniz...
