Network Access Control

For doing identity based firewalling does this consume base licenses per user using PxGrid?  The partner was not clear if they only needed to use the ISE PIC license.

Does anyone know if the CISCO VPN client (Any connect v 4.4) can be downloaded by anyone and then configured to allow for tunneling?In other words can the split tunneling on the enterprise VPN solution be bypassed by an end user? Or the solution is c...

It seems like filtering the TACACS live log has lost its functionality of searching on specific IP and now only support searches for either IPv4 or v6.Can anyone please fix this issue for us customers that multiple thousands devices and don't enter t...

Hello,   I've just created some user custom attributes and wanted to add these attributes to a authorization profile. But for attribute #55 I receive an error message: "Unable to edit Authorization Profile (xxx) : Datatypes are mismatching for Cisco-...

Hi,Customer has the following ACS deployment:HOCSACS-1121-K9CSACS-1121-K9L-CSACS-5-LRG-LIC=DRCisco Secure ACS v4.2since they have the Large ACS license and its quite an investment, can we migrate it to ISE licenses? is their an active migration progr...

Hello team,ISE2.4 installation guide shows onlly TCP 7800 is used for Policy Service Node Group communicationbut user guides shows 7802 is also required.Installation guidehttps://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_Inst...

HelloI am looking for some best practice advice.  My aim is to minimise the amount of logging done on a node (for the purposes of TAC debugging etc.) whilst allowing me to still see what I need to see via Reports, Live Log, Live Sessions etc in the G...

Hi,Want to confirm whether login to ISE CLI via AD User works?. I am getting access denied error message when i login to ISE CLI via AD User.Admin user able to login to ISE CLILogin to ISE GUI works for External Authentication (AD user).

Team,I have a customer running in Closed Mode with order Dot1x --> MAB and Priority Dot1x --> MAB with host-mode “multi-auth” where Avaya phones are authenticating with MAB. The PCs connect in-line through the phone and are running Dot1x with Microso...

Hi CommunityAs part of a migration from ACS to ISE I should import User informations into the ISE.The problem is that the user password has commas... and comma is the delimiter for the import file.Is there a way to get this solved except the solution...

Helloto anyone using ERS (External REST Services) to poll PAN nodes for active/standby status, you might be surprised to find that there is a change in the attribute name when polling the status of a PAN node. I found this out (the hard way) today wh...