Having a problem with the Cisco ISE openAPI. I want to filter endpoints based on them not belonging to an endpoint identity group(s). However, whilst the following request using the filter "EQ" works GET /api/v1/endpoint?page=1&size=1000&filter=group...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! ISE 3.3 patch 4 to patch 6
I can jump patch 4 to 6 ?patch 5 has interface bug so want to skip it
\How to set up the posture policy to do check only for remote vpn(Cisco secure client) users, no posture check for users connected via wired or wifi? Thanks
my ISE setup is two node deployment cluster. Primary and Secondary. I am upgrading to latest version.How can I upgrade 1 ISE node alone, so incase of any issues I can connect back the non-upgraded ISE node in production.Incase of deregistering second...
When defining a posture policy, if we have 3 separate policies with the same conditions {id group, operating system, other conditions}, one with requirements for AV and one is Anti-spyware and another one is Anti-Malware. It doesn't have to meet al...
I have a question about ise license. I want to install ise 3.0 or higher version on vm. Does the basic license apply from 3.0 or higher? Or is it limited to 90 days?license
Resolved! Switching from IBNS2.0 to IBNS1.0
Hello All,I need to know is there a way where in i can switch from IBNS2.0 style of configuration to IBNS1.0 style of configuration on the new IOS XE switches. I did try the command "authentication display legacy", however, this command is not execu...
Hi,Is it possible to integrate Kandji MDM with Cisco ISE?I have been looking for guides but so far not found any.Our company uses Kandji MDM for the management of Apple devices and we want to integrate it with ISE to enforce NAC. I have just finished...
I am attempting to test and eventually implement 802.1x & MAB on my LAN. Currently in the testing phase so I am trying to run MAB by itself. My setup/test procedure is as follows:End host on Vlan 110, attempting to be authenticated via MAB. Attemptin...
Hi All,I would like to know if it’s possible to create different posture policies for wired and wireless endpoints. For example, since wireless users typically use laptops and are roaming clients, the Cisco Umbrella service must be checked. However, ...
Hi All,Has anyone noticed below alarms on ISE?Log collection error : Server=XXXXXX; Log Type=SecureSyslog : nullLog collection error : Server=YYYYYY; Log Type=ProcessStatus : nullLog collection error : Server=ZZZZZZ; Log Type=SystemStatus : nullLog c...
Hi, We have a two-mode ISE 2.7 Patch6 deployed.Recently we rolled out 802.1X to all our customers Windows10 laptops and desktops with EAP-TLS. The majority (98%) of the users can login to the network without any issues. Some users get this error mess...
Hi, I've configured a Cat9300 running Gibraltar 16.12.3 to retrieve its CTS PAC but it is not working. This is my current config: 9300-access#sh run | sec radiusaaa group server radius ise-pacserver name ise-pacaaa authentication dot1x default group ...
Hello,We have issue with ISE Posture happening only on Wireless network, let me give you details:We have DNA Fabric with cisco ISE and Wireless integrated with it, we also have Palo Alto global protect with enforce policyOn our infra we have Quaranti...
Hello Cisco ISE lover, Currently, I have an inquiry refer to posture process. As we have Pending and Complaint status for DOT1x (Supplicant) wired connection. Base on your experience, does Posture process will cause/delay/slow for window PC logon pro...
