Network Access Control

Hi Expert,we are deploying a new PoC enviroment and we are running in a strange problem.Scenario:3 nodes of ISE in PAN failover running version 2.2.After some days that the cluster was running I have seen that both PAN server were running as secondar...

Hello All,   ASA5525 - v9.4(1)   We are using Cisco ISE for VPN authentication of users, with appropriate group policies/profiles, etc... I had a need to create a Local user, group and connection policy while doing some maintenance on the ISE Server ...

HiI have a Native Supplicant Profile that supports the deployment/on-boarding of a client device with 2 SSIDs both using EAP-TLS authentication.On-boarding requires the client to initially authenticate via their Active Directory credentials which the...

Hi, I have a sititation where I need to use a central Microsoft NPS server to secure Cisco devices across multiple sites. Each site has there own IT team who can access their equipment but shouldn't be able to access another sites equipment.    I hav...

Hi dear experts,i'm working on a new design with several redondant Data Centers, and would like to know how many secondary PANs can I have?From what I've read in the docs, only 2 PANs can be part of one infrastructure. Isn't it definitly impossible t...

Can anyone clarify whether it is possible to see on Firepower (FMC) information from GUEST users coming from ISE?There are several documents showing pxGrid integration but in all of them users must reside in the AD.Our customer use case is: they want...

Hi All,I'm running into some issues with CWA URL Redirection to work with https sessions.  We try to browse to a https websites (google, etc) and CWA URL Redirection doesn't work.  Works great with http websites. Is there a workaround or a solution f...

Hi Team,We are working on an opportunity of ISE with PoC currently in progress have some queries for which need clarity: Is there any mechanism we can provide real time alert on connection of unauthorized device on wired / wireless network?The custom...

Hi,If NADs (switches/routers) use radius for device admin login, do these sessions count towards the Base license ?Thanks

It was brought to my attention the integration between ISE pxgrid and McAfee DXL.The document on the following document explains how it works on a high level and it is something that I would like to start testing.https://www.cisco.com/c/dam/m/en_us/p...