Hi everyone I am trying to Upgrade a Cisco ISE PSN and getting this error: ******** STEP 3: Validating data before upgrade... %warning: Cannot upgrade this node as new PAP has patch(es) installed on it, please remove the patch(es) and try again.*****...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Incorrect hostname and domain name on CLI preventing DNS lookup from working. Corrected the domain name and hostname but health checks within GUI are still showing failed and the old hostname and domain details...
When I do a CoA command on my cisco ISE Server to any device it fails about ten times then it succeeds. It isn't a big deal because it eventually succeeds, but I'm wondering if anyone has an idea why it fails 10 times before it succeeds.Switch Cisco ...
Hello in our environment we are using ISE 3.1 and Meraki access points. We are implementing posture. Sometimes clients get disconnected during working hours, after posture lease expires and when roaming occurs. Analyzing DART logs, we see the message...
Resolved! Radius CoA not working
I have Cisco ISE setup using IBNS 2.0 but without Radius DTLS and CoA seemed to work fine. I converted it to Radius DTLS and when I did that, I can no longer do CoA commands via the endpoints page of Cisco ISE. I included the names of the trustpoints...
Hello All, I'm running into an issue with configuring a Grace Period for an SCCM Posture Condition on Windows. The customer would like to have a 21 day grace period from the time a critical patch is available to the time it is enforced in Posture Co...
Dear Experts,I've been tasked to complete the task of performing 802.1X wireless authentication from our Ubiquiti APs using Cisco ISE. I am able to complete the authentication and authorization part itself without any issues. The problem happens when...
Dear community, I have a switch, and in that switch port, is a HUB connected. The hub then has three computers and one Printers connected to it. The computers need to authenticate via PEAP whilst the Printer via MAB. I applied the general configurat...
Resolved! CLI Creds not working
I have read thru the threads to know that the GUI and CLI logins are not same other than default admin I created during initial setup and configuration.I need to create SSH/console logins as a backup to GUI.Followed the steps to create username with ...
Hi guys,Recently i have replaced a secondary unit of the cluster firewall a-p mode fortinet firewall, which was integrated with cisco ise as Radius server for AAA.Now after replacing i lost ise contact with both fgt and am unable to login with AD cre...
When trying to upgrade Cisco ISE, I must first complete the checks beforehand to do so.The only error I get in this regard is with one specific node:Running the command mentioned on the CLI of this node to see further details just gives me the below ...
Hello, I like the idea of creating EIG (Endpoint Identity Groups) in a hierarchical fashion, but I have run into a limitation - wondering if there is a solution for this. If you create an EIG Hierarchy as follows: Parent 1 Parent 2 and under each Par...
Resolved! ISE Azure REST/ROPC for Device Admin
Hi All,I have been testing ISE with Azure ROPC for EAP-TTLS and AnyConnect VPN authentication. Both of these work ok. As both of these use-cases support PAP, I'm assuming that it is also supported to use Azure ROPC for RADIUS and TACACS device admini...
I have a Cisco ASA configured as a VPN gateway using AnyConnect as the VPN client, and I plan to migrate to FTD soon. My remote access SSL VPN setup includes split tunneling with ISE posture assessment. However, I suspect I’m making a misconfiguratio...
Hello,I'm using ISE 3.3.0.430I have a few fortigates firewalls and I want to use TACACS to authenticate users. The TACACS is provided by the ISE.For 4 of them, there are no issues at all but for the last one, the connection fail.In the TACACS live lo...
