Hi, We have a certificate expiring next 17th. We need to generate .CSR again in order to sign this CSR our CA. The problem is that when we try to create this .CSR we receive this error: In the past, we created .CSR without problems. Why are we g...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Hi team,Customer is migrating from ACS to ISE. They need to create a secondary host IP address (/32) or loopback on ISE to provide an access to. Is it possible to do it? Thanks,Alexey
Resolved! PAN and MnT: move to new DC
Hello,In a distributed deployment with Standalone PAN and MnT in HA we need to move all of them to new DCs, PSNs will remain as they are.Which is the recommended procedure?1.- Remove nodes from the system, e.g. secondary PAN and MnT, change hosts IP ...
Resolved! ISE posture - supported SCCM versions
hi team,do we have any official statement about the supported versions of SCCM client/server for ISE+AnyConnect posture?Also I would like to confirm if SCCM Express updates are supported for the posture flow.Thank you in advance!Anastasiya
Hi guys, are there any options to export or get an user/password list from ACS 4.2 internal database??. I have used "csutil.exe -u" but I have had only got an users list but not their associate password for migrating to another environment
Hi all,We are piloting wired 802.1X but have hit a snag - FlexConnect AP switchport configuration requires the port be configured as trunk, with the native VLAN for management and access VLAN(s) for client data.I know 802.1X cannot be configured on t...
Hi team,I have a use case where the customer has an open SSID used for guest and they are using CWA with ISE. Because this is a public place, when people walk by, their cell phones will automatically join the SSID; however, very few people actually h...
If you want to do PassiveID but due to various reasons, we cannot install the agent onto DCs or employ the WMI. We do have a member windows log server that the DC's send all their logs to. Can we install the agent onto that member server to review t...
Resolved! pxGrid Username with 802.1x+PassiveID
Hi Experts,If we're using machine certificate for 802.1x authentication and PassiveID for user identity, which username will be advertised via pxGrid via the Session topic, the TLS computer account or the PassiveID username from AD logs?Thanks
Dear All, Kindly help with the below queries regarding Distributed environment,What all ports should be opened between ISE nodes in a Distributed environment. If the Admin node should communicate with the Policy Node, what all ports should be opened ...
Resolved! Number of conditions in profiling
Hello, A customer has asked if we have a maximum number of conditions that can be used within a profiling policies?Thanks a lot
Resolved! ISE support for Ruckus ZD3050 and R500
Hello, Could you please confirm if the below Ruckus models are compatible with ISE? have anyone tested the below? WLC model: ZD3050, version 9.8.2.0 build 24.Wireless AP model: R500, version: 9.8.2.0.27Best Regards
Hi,I am doing a POC for my customer on ISE 2.2 patch 4. We tried on BYOD provisioning flow using ISE as CA on a Windows 10 endpoint connected to Cisco 2960S switch.The provisioning process completed successfully, and I can see that the certificate is...
ISE Team,Just wanted to know if there was a recommended UCS firmware version to run with ISE 2.3?
Resolved! Maximum storage for ACS logging vs ISE
Dear all,My customer is migrating from ACS to ISE.Their existing ACS HW SNS-3515 only support a max. of 750GB HD which is not enough for them.If they migrate to ISE, how to compare the ACS logging vs ISE device admin logging?For each TACACS+ event, i...
