I have ISE at 1.4 patch 11. On the Dashboard page if I click on "Active Endpoints" I will receive a breakdown of endpoints on my network. Connected, Failed, Disconnected, and Total. I am wondering what defines an endpoint that is in the "Disconnected...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi All,We have an opportunity where SDA currently looks to be a perfect fit for my customers needs. However, I want to clarify a couple of things, before we venture further with the conversations, and I have been advised to query the ISE community v...
Resolved! ISE Posture checks for multiple vendors
I have a use case where our ISE deployment will need to authenticate computers from many different contractors and vendors (the computers will not be corporate managed). The security policy that we have dictates that full disk encryption, up-to-date ...
ISE 2.2 Patch 6 I just noticed I had over 20,000 endpoints that had not been purged by my GuestEndpoint purge rule. Further investigation shows that the guests hitting the portal were not getting added to teh guestEndpoints identity group as instru...
HiIf this appeared since iOS 10.3.x why is it a Cisco bug? Can someone please provide a clear explanation of what this means to ISE 2.2 users and what has changed in iOS 10.3.x?The 'Conditions' in the Bug ID seems to indicate that the PSN's need to ...
Resolved! ISE Licensing renewed
Hello, We were notified today that our ISE licensing was getting ready to expire (expires October 2016). We have since imported the new license file, which essentially doubled the count. We are thinking we need to delete the old file. Before we do...
we have appliance running version 4.2, we got configuration backup, installed ACS same version on windows server 2008 32 bit as when I tried to install acs 4.2 on 64 error it gives error that it needs 32 bit we have restore configuration successful...
Hi guys, We are using Aastra IP phones, that does't support LLDP og CDP. The phones connect to a user subnet for FTP download for the config. After the config is installed, the phone puts voice traffic in VLAN 40. How can I make a MAB policy that...
Scenario: We will be deploying several FTD in different locations. FMC communication will all be private IPs (No NAT involved). It will be all just different subnets. FTD --> Router --> Router --> FMC We followed the deployment guide, FMC seems ...
Resolved! Policy Sets and Session Resume
Hi Experts,Have a customer on ISE 2.1 Patch 2. We have a policy set that matches on Wireless_802.1x and Called_Station_ID ENDS WITH :XYZ.In the Default Policy Set, we disabled all the rules, so anyone hitting that set will be blocked.When users authe...
Resolved! NAD to PSN bandwidth requirement
Team,I need an estimate on the NAD to PSN required bandwidth. I know it depends on the # of endpoints and the reauth intervals but we need something estimate per endpoint to get back to the customer as he's deploying the PSN over WAN.Please don't ref...
We are in the middle of changing out the Active Directory Servers and have a Cisco ASA 5512 and a Cisco 5520 that authenticate with LDAP to the PDC, BDC and BDC2. It works fine when connecting to the 2008 Active Directory Servers. When we brought i...
Resolved! ISE 2.3 SFTP repository error
After upgrading to 2.3 from 2.2 I am unable to validate the SFTP repo that worked prior. In another enviornment where I have 2.0 running the same repo validates and works properly. Is this a bug in 2.3? or do I have to use a different type of repo?
Hi guysI want to test ISE Posture with AnyConnet on ASA, but the Client Provision cannot work correctly. However, when ISE Posture with BYOD is work corretly. Here some configuration on ASA and ISE captures.ON ASA: webvpn enable outside anyconnect ...
Dear All,I faced an issue that I cannot open "Report" page on Cisco ACS server 5.8.0.32.Once I opened the report page, it would be shown "blank " even though I tried it via Chrome, IE or FF browsers. However, I also upgraded to the latest patch versi...
