Network Access Control

Hello, I'm looking for a deep dive on valid DACL config.Specifically, what is the 'addrgroup' syntax used for? I can type something like:permit ip any addrgroup my_addrgroupin the DACL Content box, and it checks as valid config.If I just enter "permi...

Hello,my customer has a distributed deployment with ISE 2.3P2 - all ISE roles are running on a 3595.2x PAN2x MnT8x PSNPAN and MnT are in the same DC.We have 4916 total endpoints and 4127 active endpoints (as of today).We are seeing gui slowness on sp...

Hi Experts,Want to ask whether it is feasible to have 2 separate AD for a single cluster, say segregate them by PSN?Thanks,Wendy

In the ISE Passive-ID setup guide for using WMI, it refers to needing Domain Admin credentials.  Do you need to maintain a Domain admin "service/utility" account or is this just a 1 time setup thing?Thanks,-Dan

Hello ISE Team,My customer would like to setup a ISE server in their lab environment.During the install of the 90 evaluation:They are getting:***** checking for supported platform***** ERROR: UNSUPPORTED HARDWARE DETECTED!***** Cisco UDI (Unique Devi...

Hi Experts,I see that while creating conditions for one my policy, I have a requirement where-in I need to provide access to the users based on their GuestType.But, in the conditions, no where I am able to see the GuestAccess dictionary being listed....

Hi all,to my knowledge, SGACLs are normally statless, which means that I have to explictly allow return traffic in cases where SGACLs are used.Are there any devices (besides ASA/FTD) which are stateful when using SGACLs?Roland

Greetings all,I'm investigating ISE for our on-campus NAC which would include our residence halls wired/wireless.  With our current NAC solution, we're doing MAB with wired and wireless along with a captive portal.  The existing NAC has policy to exc...