Hello Team, I need to know if is possible nowadays to use an ACS 5.7 to authenticate with Radius the PaloAlto devices with OS 10.2, I followed a couple of guides with no success, no matches on the services selection rules, neither on the authorizatio...
Hi, We are using the SLR license option on our ISE's. When we apply the license file it always generates a Confirmation Code which you then input onto the Cisco.com License portal against that license. My issue is that the Operations team that appl...
I have a startech docking station connected to a Mitel phone and in ISE I can see the MAC address of the Dock when a laptop is plugged in. The authentication for the dock fails, which is fine as it can't find a profile for it and comes up as 'Unknown...
Hi community, I'm using a Custom Condition to block some laptops names during authorization and it works fine.I've managed to create an API to check the condition exist, and /add/remove new hosts to it, but I cannot manage to implement the call to cr...
{apiurl}/endpoint?sortasc=name The sortasc and sortdsc parameters does not seem to work in ISE 3.0 (Version 3.0.0.458 , patch 4) No difference in the returned results. a unsorted list of endpoints Anyone else with the same problem, are there any wor...
Currently struggling to get this to work correctly.Situation:Our self-deploying Windows 11 machines (autopilot and Intune) boot up and will start the deployment process. However because failing to authenticate and get redirected into our internet ena...
Hi all;As you know, there is several authentication scenarios in Windows native supplicant. One of them is "User or Authentication" option:Based on the official documents, by selecting "User or Computer Authentication" option, Windows performs an 802...
Hi All,Need clarity on the service account password expiry.Cisco ISE 3.2 and service account created to access the NAD1. Could see the option password change on first login but no option to set the expiry or password change notification. 2. The globa...
Hello Guys, Am working on testing Scenario For Cisco ISE. We have Meraki Network , Users are connected to Meraki AP now with AD authentication (Microsoft azure Cloud ). I am looking for a BYOD solution, that my Employees can access resources from the...
I have deployed ISE for our organization and using cert for machine authentication only. the issue that I saw in several chats talking about host/ prepended to hostname happens for my setup. I have adjust the advanced setting to rewrite host/ so that...
Hi All,We do static endpoint assignment to Identity groups in ISE. But even if endpoint is active the assignment changes to a different identity group after few hours or days.Any idea how to troubleshoot such situation to narrow down the issue?
Hi,I wonder if I could get some help from someone on an ISE profile?I have some Aruba Wi-Fi Points and I've had to modify the built in profile called 'Aruba-Ap' to include the OUI MAC otherwise it comes back as unknown. The AP is now MAB authorised c...
Hi, I am having a major problem trying to get 802.1X / EAP-TLS working over one of our new remote links. I'm thinking it's related to the MTU size and packet fragmentation. Wireshark shows "Fragmented IP protocol" when during the EAP challenge an...
Hi, We require support for integrating Aruba Cloud Based WLC with Cisco ISE 3.x for .1X wireless authentication, MAB authentication, and guest sponsored access. Please note that there is no ClearPass in place.
Hi,Im trying to create an AAA deployment for Cisco Switch/router access for users and a service account for DNA center and not sure where to start. Basically, I want users to be able to login to cisco devices using TACACs auth (via clearpass queryin...
