Network Access Control

Resolved! ACS Device License calculation

Hello, We got Cisco ACS 5.8 Primary and secondary servers for tacacs+ and radius. 160 Devices configured for tacacs+ all with /32 mask means total 160 device count 4 devices configured for radius, viz 2 asa and 2 wireless lan controller all with ...

IOS XR missing multicast (PIM) configuration syntax in VIRL

I have topology which includes IOS XR image running on VM Maestro Need to configure PIM. Below configuration syntax is not available in the image.Cisco IOS XR version: 6.0.1 VIRL : Version: 1.3.0 Is there any compatibility issue for both the versio...

Cisco ASA 5585-X, from one interface traffic is not passing to another interface

From one interface traffic is not forwarding to another interface. ciscoasa# show module all Mod Card Type Model Serial No.--- -------------------------------------------- ------------------ ----------- 0 ASA 5585-X Security Services Processor-10 w...

How to fix the error "Get flow failed java.lang.NullPointerException"

I am getting this error while trying to edit Guest Portal and not letting me add location under Self-Registration Page Settings.

ISE 2.2 - Multiple MAB policies processed sequentially

Hello all CISCO community ! Quick question : does someone knows if it is possible, on an ISE in policy set mode, to process several MAB policies sequentially ? For manageability purposes, I would like to "split" my existing MAB policy in two. If...

Windows 10 devices can't connect to an 802.1X environment

Windows 10 devices can't connect to an 802.1X environment (November Update)https://support.microsoft.com/en-gb/help/3121002/windows-10-devices-can-t-connect-to-an-802-1x-environmenthttps://support.microsoft.com/en-gb/help/3121002/windows-10-devices-c...

Resolved! Using TrustSec for Campus and Branch segmentation

I have a client that is looking to segment their network. They were initially thinking either ACL's on their switches or using a FW. However, after talking to them about ISE and TrustSec, they are interested in that solution. The client is an inte...

Resolved! Qradar integration with pxGrid

Hi experts,To my knowledge I haven't come across a pxGrid integration with Qradar or any other SIEM.Can anyone please confirm ?My understanding is syslogs can be directly sent over to Qradar, what added value would pxGrid integration offer ?

ISE test plan for Radius/TACACS device administration

Hi all,I just found this ISE POC test template:ISE Proof of Concept (PoC) Test Plan TemplateDoes anybody have an up-to-date ISE test plan for Radius and TACACS device administration from a customer POC ?Many thanks for your help,Ingo

Unable to set sftp in ISE 2.3

HI, we are using ISE 2.3 and try to set SFTP into this and getting below error message **************************************************************** Error messages ISE-Test/master# show repository ragnar-sftp% Failure occurred during request ***...

Resolved! Android : unable to download profile.( ssl peer verification failed )

Hello ISE expertsI'm facing different kind of issue with the BYOD On Boarding for Android devicesBackground: I am trying to setup WI-FI Test lab setup with Dual SSID for Mobile On-boarding and Provisioning. When Tried to registering Android Mobile ph...

Windows 10 devices can't connect to an 802.1X environment after November Update

I am planing to upgrade the ISE appliances from 1.4 to 2.0.0.306, but I came across following issue with ISE version 2.0 patch one. Please advise me about the fixed release? Windows 10 devices can't connect to an 802.1X environment https://suppo...

ASA5506 with FirePower and AD users IDentification

Hello, Is it possible to restrict/control access to the Internet/services using AD functionality (Windows Svr2012 R2) ? I saw some setups but only with FirePower virtual appliance as AD users-ID controller- which need additional license and VM-mach...

Resolved! Need posture configuration guide for Aruba on ISE

Hi allNeed posture configuration guide for Aruba on ISE, do you have it?ThanksBRSongl

Resolved! SHA-2 PKI Support on Cisco Switches

Hi,I am trying to find out the IOS versions which support SHA-2 for device certificate but I am not able to find out relevant source.Could anyone point me in the direction which mentions what versions (3.6.X, 15.0.X, 15.2.X) support SHA-2 for device ...

Network Access Control

Forum Posts

Resolved! ACS Device License calculation

IOS XR missing multicast (PIM) configuration syntax in VIRL

Cisco ASA 5585-X, from one interface traffic is not passing to another interface

How to fix the error "Get flow failed java.lang.NullPointerException"

ISE 2.2 - Multiple MAB policies processed sequentially

Windows 10 devices can't connect to an 802.1X environment

Resolved! Using TrustSec for Campus and Branch segmentation

Resolved! Qradar integration with pxGrid

ISE test plan for Radius/TACACS device administration

Unable to set sftp in ISE 2.3

Resolved! Android : unable to download profile.( ssl peer verification failed )

Windows 10 devices can't connect to an 802.1X environment after November Update

ASA5506 with FirePower and AD users IDentification

Resolved! Need posture configuration guide for Aruba on ISE

Resolved! SHA-2 PKI Support on Cisco Switches

Update snmpSettings on networkdevice via API on ISE

UserPrincipalName not showing in ISE Log for certain user

CISCO NAM installation by iso generated by System Center

High Response time for Entra ID TEAP with ISE

Cisco C9200-M Meraki agent posture support - ISE integration

ISE error 24441 account not permit to log on

This application requires Flash Player v9.0.246 or higher for 2026

ISE Posture update issue

NAC Mac Static

CISCO Identity Services Engine (ISE) Device Profile and OUI data