Hey all,Given the recent CVEs we wanted to patch our deployment to 3.4 P7.While preparing, I heard from some colleagues that Cisco TAC had reports of issues related to the patches released on Sept 14. Apparently customers report that patching might b...
Team,I am testing eap-teap with Eap chaining, problem what i am facing secure client is already installed and used for wired and wifi in my machine, whenever i enable dot1x on Ethernet adapter 802.1x my test laptop is prompting adaptor issue and i am...
Hello, we are currently in the migration phase to a catalyst 9800 wlc. I am currently working on the tacacs configuration and I making no progress with setting up the lobby admins tacacs profile. With the old airos wlc you could simply select "Lobby...
Hello TeamI need some suggestion from expert in Cisco ISE community.we are using eap-fast with machine and user mschapv2 authentication, and i am having a requirement is1. To migration user to eap-fast using machine (cert auth) and User mschapv2 or2....
I recently upgraded Cisco ISE to version 3.4 Patch 7. Since applying the patch, I’ve noticed that the Endpoint Profile is showing as Unknown.In the Dashboard, under Endpoint Wizard, the endpoint profiling statistics are also showing approximately 89%...
Hello,Does anyone know what is the correct way to configure Policy Set for EAP-FAST when NAM uses certificate machine authentication and MSCHAP user authentication ? I have this policy but I doubt this is the correct one.
Hi All,I am preparing for ISE upgrade from current version 3.3 patch 8 to patch 12 .Prior to upgrading, I did the system and operational backups and also exported and saved the system certs.1. Do I need to export all trusted certs as well and save th...
Hi everyone,Unfortunately, old versions of iOS, Android, Chromebook do not include in their Trusted Root CA DB/List, the Sectigo Root R46 certificate so my Web-authentication login portal that uses a cert signed by that Sectigo Root R46 is giving me ...
Hi all,I just upgrade ISE from 3.1 to 3.4 P6 and got an alarm like pictureAnyone might explain to me what it is and how to fix it? I have checked configuration on the switch and there is no command "aaa accounting update periodic"The existing: "aaa ...
Hello mates,I’ve seen this error while trying to do a posture update: “Feed cannot be generated or parsed”:We have it for two weeks now and we patched our deployment yesterday but the issue is still here. When I try a to update now, I see my proxy go...
Hi everyone,I'm facing a stubborn issue on a Standalone Cisco ISE 3.5 (Patch 4) node and would appreciate any ideas.The Situation: I restored a configuration backup (taken from ISE 3.5 Patch 3) onto a ISE 3.5 Patch 4. Since the restore, the ISE Data ...
When applying a patch to Cisco ISE nodes in a distributed deployment, after patching the Primary Administration Node (PAN), should the Secondary Administration Node (Secondary PAN) be patched next, followed by the PSNs? Or, if patching one node at a ...
Hi Everyone,We randomly observing problem on our users that getting "No policy server detected" message on their Cisco ISE anyconnect clients, device stuck in Quarantine subnet and nothing happens, in order to fix it they have to reboot the laptopThi...
Hi ,I was asked to disable 802.1X for a few specific ports, and all I had to do was under the switchport: remove access-session port control-auto command.But recently, there was an incident across the entire branch where users were not authenticated ...
I'm seeing this in my log, but everything is working as it should."AD: ISE account password update failed".Everything looks normal under:Administration --> External Identity Sources --> Active DirectoryMy ISE is running 3.4 Patch 6Cisco Bug IDs: CSCw...
