Network Access Control

Hi Fellow users, we have a requirement of doing Guest Wifi splash page via ISE. The requirement is for a guest to see two options on the Guest captive Portal.Option 1: is to enter your sponsor`s email address to get a longer access like for 5 days an...

ISE 3.2 Patch 6We are having a recurring issue that is really becoming a problem now with some MAC addresses dropping their identity group after being placed into one.Example:1) Add MAC address to Identity group through Context Visibility -> Endpoint...

Hello!Tried to upload Cisco Secure Client 5.1.6.103 to ISE 3.2.0.542 for further Posture Implementation, but failed due to following error: "File to Upload too large!". File is cisco-secure-client-win-5.1.6.103-webdeploy-k9.pkg and size is 148 MB.Mea...

Hello, I am facing the following challenge:We are implementing Google authentication and for that purpose we included a load balancer in the a name of SAML provider (guest.mydomain.net)In the Authorization profile we included a static name to match t...

Trying to get all guest users listed in an API-call, but the API responds with: com.cisco.cpm.guestaccess.apiservices.exception.PortalSystemException: Sponsor users sponsor groups are not available any more"The API-call that throws me this error is:h...

I get the alert from ISE "Trust certificate 'Certificate Services OCSP Responder - FPISE01#00004' expiring in few days " but unable to find this cert anywhere in GUI !- what is this Cert for ? do I need it ?- where can i find and delete if not needed...

High authentication latency alarm in ISE ?How to check and what is the reason why this alarm got generated ?ISE Version - 3.2.0.401

With 802.1x and MAB failover rolled out, instead of allowing entire OUI's for printers and things like that we are looking at utilising stricter device lists.Our helpdesk and local site technicians don't have access to ISE, so to reduce the load on u...

Hello ISE Community, I am wondering if anyone else is seeing this same alarm for "ERS request content-type header is out-dated" even though the current ISE supported RESTFul API is being used per Cisco documentation. I am currently running ISE 3.3 Pa...

Dears i`m have customer use Do1x (wirless) user + Machine Auth using (TEAP (Mschap for user , TLS for machine )) << for windows (no posture no cisco any connect )now he need to apply cisco ise for  8- 10 laptops  (wirless) with Mac OS like the Window...

Hi, I’ve promoted my cisco ISE secondary node as primary and when I try to take configuration backup , I get “Cisco ISE Backup creation terminated: Backup script failed. But when I promoted first node as primary again, It works again.

Hi,Im looking for possibility to map endpoint certificate value "SAN:URI Intune ID/GUID" that will be used on ASA Remote VPN for client authentication and due to Intune MDM integration I need to send this SAN certificate value as  CiscoAVpair/mdm-tlv...

Welcome to the Cisco Community Ask Me Anything EventWe invite you to participate in our upcoming Ask Me Anything (AMA) conversation. Please submit your questions from Thursday, April 23, 2026, through Thursday, May 7, 2026. Our experts Miguel Martine...