Hello,we've a ISE Cluster v 3.2p4 and want to import many MAC-Adresses in a Endpoint Group.If I import in "RegisteredDevices", it works, but if I want to import in a self created Group, e.g "ACME-ASSETS", it fails.Message:So, do you know if I can onl...
a. Integrate the Vault with ISE for AD password fetching and integration - Looking for APIb. Trying to find the API for enabling PSN work centers -> Overview -> Deployment -> Device Administration Deployment=> Activate ISE Nodes for Device Administra...
Can you confirm is this still the same or we have API to enable the Network default device - which can be enable and set password for TACACS.Note: Pls share if any API available for the same.W.r.t Reference of ticket - https://community.cisco.com/t5/...
Configuration Done ON ISE Policy Elements::Device AdministrationTacacs+ ProfilesCheckPoint1. General tabName: CheckPointDescription: CheckPoint Firewall 2. Custom Attibutes tabAttribute/Requirement/Value:CheckPoint-SuperUser-Access=1Mandatory1Attrib...
Hello,We currently use ISE 2.2 and the radius protocol to SSH into our network gear. We now have a requirement to make that access multi-factor authentication. We are also standing up an azure multi-factor authentication server for Cisco anyconnect...
Hi Experts,Currently, we've an Authorization profile configured for the printers (canon) with the DACL being used is 'permit ip any any'. Now, client would like to restrict just to the basic services as given below:-permit udp any eq bootpc any eq bo...
Anyone knows the steps to reimage an ISE VM node. Current disk size is not enough and we would like to increase VM disk size, but Cisco doc says ISE node reimage is required for new VM size to be reflected.Current is primary node. There are two ISE n...
Anyone know how to renew an expired trustsec PAC on ISE? I'm asking this because we can't SSH into our switches any more. W keep getting "expired PAC" when trying to log in. When we check ISE, we see that the PAC expired for quite a while ago. Check ...
Is it possible to update the default network device via API in Cisco ISE?
Can ISE limit restconf commands sent to network devices? Essentially a program was built to clear arp on ASRs and also shut/no shut specific interfaces on C9500s. Can we limit the commands to just that via ISE? I'm not tasked with implementing thi...
We plan to operate two nodes.I have one concern regarding design. If ISE HA is not implemented and two NODEs with PAN/MNT/PSN persona roles are operated as ACTIVE/ACTIVE as shown in the configuration diagram, will there be any problems? From a servi...
What is the correct Cisco smart licensing portal for registration, renew registration and refresh these days? Currently I have:smartreceiver.cisco.comsoftware.cisco.comtools.cisco.comtools1.cisco.comtools2.cisco.comI need to cleanup my firewall rule...
Hi, This setup is in a k-8 school where we have numerous Content and Threat Categories blocked by network default. I want to create a Group Policy that will bypass most of the restrictions created in the default setting to allow school admin staff an...
Hi All, Looking for some design guides for an ISE deployment using Azure across multiple counties. Any assistance would be appreciated. Cheers,
HIIssue with our ISE Deployment self signed certs have expired so deployment is out of sync, self signed certs are multi use (Admin, Portal, Radius DTLS, EAP)Is there a certain order to renew the self signed cert and get the deployment back in sync.?...
