Hi all,I'm trying to understand the actual technical reason Cisco recommends patching the Primary PAN before the Secondary PAN. I've heard people say it's because of replication, but that's the part I don't quite understand.If I patch the Primary PAN...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi all, one of my customer would like to create their own custom fields for guests (in Guest Access -> Settings -> Custom Fields) and query them within an authorization policy to assing a corresponding authorization result. However, the only fields t...
We are planning to migrate our standalone Cisco ISE Guest VM to a new virtual machine.Current setup:Old ISE VM: Cisco ISE 3.3 Patch 4New ISE VM: Cisco ISE 3.4 Patch 3We have already taken both:Configuration backupOperational backupOur questions are:C...
We are currently running fully on Microsoft Entra ID, and things are looking pretty solid so far.--> All our Entra‑joined (or enrolled) devices are authenticating using EAP‑TLS (device-based)--> We’re leveraging device group membership in Entra ID to...
Hello All,I am working on integrating Cisco ISE 3.4 Patch 5 Guest Portal with Ruckus One (Cloud-managed WLAN), and I am facing an issue where the client stays stuck in Portal Redirection state even after successful authentication with Captive Portal ...
This is probably a dumb question, but I understand the SAML IdP type won't work for device administration with TACACS+ since it is HTTPS based, but is there another method to authenticate against Azure for TACACS sessions? AI is telling me to spin u...
Resolved! ISE Windows 11 issue
I have an issue I hope someone could help me with. I am having an issue with 802.1x authentication on ISE. They are using PEAP with certificate computer only authentication and everything appears to be configured correctly but authentication continue...
I know this might be a windows issue but I figured I'd ask in case anyone has had this experience.Main Issue: Using EAP-TEAP GPO (Windows Server 2022) for Windows 11 devices, clients are able to use the machine cert to auth with no issues. Once the u...
Hi Community, Since ISE does not support telnet or nc command, is there any other alternative to check if ports are open from ISE to the target server? For example, if I want to check if TCP/445 is open from ISE towards the AD server. I found someone...
Hi,I need to add a third node to ISE deployment. When i go to PAN to register new node. I introduce FQDN, user, pass but i receive this error: Certificate Signature Verification failed CN= Company1 CAROOT, DC=Company1, DC=com: FQDNI verified that the...
I am currently running Cisco ISE cluster 3.3 patch-7, and we mainly use it for 802.1x wired, wireless, and MAB. We also integrate Cisco ISE with Microsoft Active Directory (AD), and that's about it. We're currently running it on VM ESXi. We're redu...
Hi Does EAP-TEAP solve the first time user login scenario when using EAP-TLS? So, you image a new Windows PC, it gets the machine certificate and always authenticates fine. Then, a new user is given that device that's authenticated successfully and t...
Resolved! User Cert Authentication Issue
Hi Guys,I am experiencing some issues that for some reason my user certificate is not able to use for 802.1x authentication even though my user certificate usage is set to Client Authentication.Are there any permissions needed in the AD/GPO for the u...
Hello, Can someone please help me with the error message ? I can update customAttributes for an endpoint using single PUT request for that endpoint id. But, bulk update does not workHere is the endpoint URIhttps://<ip-address>:443/ers/config/endpoin...
Hello Team, I am evaluating Cisco ISE for my company, going well except for my posture policies.I have on my PCs Kaspersky endpoint Security v12.x, when I try to create posture policy for this application running state it's not working a...
