Hi All,
I'm currently setting up ISE posture assessment on an existing ISE 3.2 deployment and I need some guidance regarding certificates to prevent errors during posture discovery/assessment for unmanged devices.
The PSNs have been configured with an FQDN using a private domain name so it not going to be easy to provision a well-known public CA signed certificate on the PSNs for the admin role in addition to the portal role. Instead as a workaround, is it possible to use static FQDN entries in the call home list to directly targert the PSNs without the need for discovery and redirects removing the need to configure a public cert for the admin role?
For example, will it work if we configure the call home list to include FQDNs posture1.domain.com:8443 (resolves to PSN1) and posture2.domain.com:8443 (resolves to PSN2) and then configure these FQDNs on the provisioning portal along with a certificate tag associated to public CA signed certificate?
