Network Access Control

Guest portal redundancy

here is my deployment workflow User >> GUEST_SSID >> AAA to PSN1 >> Redirect user to FQDN Guest.XXX.org >> Configure DNS load balance to resolved FQDN to PSN1 or PSN2 Should this workflow work? or i should configure it statically as User >> Gue...

ISE high CPU caused by user "iseadmin"and proc "jsvc"

process "jsvc" is causing high cpu over hours.sometimes cpu is going down, sometimes not, doesn´t depend on AAA traffic or adminSessions any idea, what could be the reason ? thx in advance Plattform: ciscoSNS3495K9ISE Version: 2.2.0.470 PID USE...

Resolved! API to perform CRUD Operations on endpoints and groups of endpoints

Hello, I am looking for a way to leverage ISE ERS so that the desktop support team could add mac addresses to various groups in ISE without actually logging into ISE as an admin. We would like to make it as simple as them selecting a group and impo...

Resolved! Where can I find ISE 2.x Design Guides & Load Balance

I am looking for the latest ISE Design Guides. I am interested in the Load Balance Guide for NetScaler.The Communities only reference ancient ISE 1.3 Stuff and the Netscaler documentation is anemic and reference F5 old stuff.Please advise.

Resolved! ISE-Admin access: Extra condition with external Username "contains/starts" with "x" ?

Dear experts, while migrating some ACS solution, our partner is challenged with an option, that exists in ACS 5.x, but seems to be hard to build in ISE.The goal is to trigger and authorize with an "external AD membership", which is fine, but then a...

Resolved! PostgreSQL External Identity store

I followed this guide PostgreSQL -Configure ODBC on ISE 2.1 with PostgreSQL - Cisco I have this set up on Ubuntu and I have pgAdmin4 up and running connected the database as well. What I would like to do is set up groups or tables for mac addresse...

Resolved! Distributed Deployment with 1xPAN 1xMnT and 2xPSNs

Hi Team,Is it supported to have a distributed deployment with 4x3595 servers with 1xPAN, 1xMnT and 2xPSNs? In this case, will we get 40k as the maximum number of active endpoints?I've seen that we always recommend to have redundant PAN and MnT. I wou...

MACSec Switch to switvh with or without ISE

Hello, I have a question regarding Switch to Switch encryption.We are running ISE to secures a switch to switch connection with Macsec. (802.1x mode)Because of some issues with ISE (upgrade, maintenance) we lost the connections between the 2 swithes ...

Resolved! The order in which DNS settings are changed.

HelloI'm running a Cisco ISE 1.4 at Dedicated deployment (separate PAN Primary/Secondary, MnT Primary/Secondary and PSNs)I plan to change the IP address of the DNS server.When changing the DNS server settings with the CLI, is there an order? For exa...

Client Provisioning Policy

Hello Community, I am New to ISE 2.1 and getting confused while understanding Posture policy why do we need to define CPP Policy separate. we define posture conditions under "Policy Elements > Conditions > Posture" and then Action items under "P...

Resolved! ISE vulnerability scanner support for Rapid 7, Venafi and Nexpose

Currently ISE 2.1 supports Qualys for vulnerability scanner integration (Threat Centric NAC) - customers have asked about roadmap support for Rapid 7, Venafi and Expose.

Network Setup Assistant - No active interface

When running on Surface 3 Windows 10 Pro 1709 I can see in the spwProfile.log the following: Identifying wired and wireless network interfaces, total active interfaces: 0 Yet when running on Surface Pro 3 Windows 10 Pro 1709 I get : Identifying wired...

Cisco NAC Agent failing To popup on windows 10

Hi.I have a problem in my environment.Currently we are using ISE 2.3 with dot1x (machine & user authentication) and posturing.We are using Cisco NAC agent 4.9.5.8 for all windows machines.OS machines version is Microsoft windows10. in my network used...

Undocking and docking back puts the PC on the default VLAN

We are using ISE 2.2 patch 5 and AnyConnect 4.5 NAM module as the supplicant for 802.1x authentication. We are using Cisco 3850x switch with 16.6.1 Everest code. We have run into a weird issue: When a laptop (WIN 10) is undocked and docked back, wir...

How to Renewal ISE licenses in HA

Hi we have 2 x ISE deployed in HA. our current licenses are going to expire and we want to renew the licenses. i have following queries 1- do i required separate licenses for both nodes in HA or just single license on Primary node would be suff...

Network Access Control

Forum Posts

Guest portal redundancy

ISE high CPU caused by user "iseadmin"and proc "jsvc"

Resolved! API to perform CRUD Operations on endpoints and groups of endpoints

Resolved! Where can I find ISE 2.x Design Guides & Load Balance

Resolved! ISE-Admin access: Extra condition with external Username "contains/starts" with "x" ?

Resolved! PostgreSQL External Identity store

Resolved! Distributed Deployment with 1xPAN 1xMnT and 2xPSNs

MACSec Switch to switvh with or without ISE

Resolved! The order in which DNS settings are changed.

Client Provisioning Policy

Resolved! ISE vulnerability scanner support for Rapid 7, Venafi and Nexpose

Network Setup Assistant - No active interface

Cisco NAC Agent failing To popup on windows 10

Undocking and docking back puts the PC on the default VLAN

How to Renewal ISE licenses in HA

UserPrincipalName not showing in ISE Log for certain user

CISCO NAM installation by iso generated by System Center

can i USE 2 CISCO ISE posture policy in same time with 2 Anti malware

High Response time for Entra ID TEAP with ISE

Cisco C9200-M Meraki agent posture support - ISE integration

Cisco ISE 3.4 Ports for Elastic Search

Cisco ISE TACACS+ MFA

Cisco ISE Guest Portal and Ruckus One wireless

ENTRA ID Registered Devices

Cisco ISE PAN License