Are there any downsides for enabling TLS 1.3 on Cisco ISE 3.3 patch-12? This is already enabled in Cisco ISE 3.5 patch-4. In other words, is it going to "break" anything in my environment? TIA. Spoiler (Highlight to read)
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Wondering if anyone has experiences this recently. We have a Cisco ISE 3.3 patch-12 environment and Microsoft Windows-11 23H2 using 802.1x wired via EAP-TLS with certificate. Everything was working without any issues. Yesterday, we upgraded a few la...
We're running Cisco ISE version 3.5, patch 3,and we've joined it to our Active Directory domain controller.We ran into an issue where if a user's password expires,they can't change it while connected via 802.1X.Has anyone dealt with this? How can we ...
Hi Experts,Currently all our phones in the estate using default vlan and getting and IP to connect to the network.Phones are coming to its end of support hence new phones being asked to assigned to a dedicated vlan.I am thinking of using dynamic vlan...
Hi,I am encountering a similar issues as the Radius Shared Secret Bug:CSCwn09816 - RADIUS Shared Secret Masking and CSCwp06928.I am running Version 3.4 Patch 7 on my deployments.Condition:When duplicating Network Devices the shared secret always chan...
Hi All,I am preparing for ISE upgrade from current version 3.3 patch 8 to patch 12 .Prior to upgrading, I did the system and operational backups and also exported and saved the system certs.1. Do I need to export all trusted certs as well and save th...
Hi, In ISE deployment, we have a posture condition for patch management, (up to date, check for missing critical patches).The windows update agent version is 1510.xThis is not available on the ISE 3.3.I would like to also confirm if we need to integr...
Hello TeamI need some suggestion from expert in Cisco ISE community.we are using eap-fast with machine and user mschapv2 authentication, and i am having a requirement is1. To migration user to eap-fast using machine (cert auth) and User mschapv2 or2....
Hello, i get the message when i try to test the connectivite between my switch and ise:Attempting authentication test to server-group ISE using radiusNo authoritative response from any server.I assum that the cnfig in switch is correct and i can reac...
Team,I am testing eap-teap with Eap chaining, problem what i am facing secure client is already installed and used for wired and wifi in my machine, whenever i enable dot1x on Ethernet adapter 802.1x my test laptop is prompting adaptor issue and i am...
I recently upgraded Cisco ISE to version 3.4 Patch 7. Since applying the patch, I’ve noticed that the Endpoint Profile is showing as Unknown.In the Dashboard, under Endpoint Wizard, the endpoint profiling statistics are also showing approximately 89%...
Resolved! Latest ISE patches - experience
Hey all,Given the recent CVEs we wanted to patch our deployment to 3.4 P7.While preparing, I heard from some colleagues that Cisco TAC had reports of issues related to the patches released on Sept 14. Apparently customers report that patching might b...
Hello, we are currently in the migration phase to a catalyst 9800 wlc. I am currently working on the tacacs configuration and I making no progress with setting up the lobby admins tacacs profile. With the old airos wlc you could simply select "Lobby...
Hello,Does anyone know what is the correct way to configure Policy Set for EAP-FAST when NAM uses certificate machine authentication and MSCHAP user authentication ? I have this policy but I doubt this is the correct one.
Hi everyone,Unfortunately, old versions of iOS, Android, Chromebook do not include in their Trusted Root CA DB/List, the Sectigo Root R46 certificate so my Web-authentication login portal that uses a cert signed by that Sectigo Root R46 is giving me ...
| User | Count |
|---|---|
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
