Security

Best method to upgrade to ISE 3.5 Full or split and why

I am currently on cisco ise version  3.3.0.181 and planning to upgrade to 3.5. I have two nodes a primary and a secondary. What is the best way to prepare for the upgrade and method split or full upgrade. Can you also tell me what gotchas you ran int...

SISE v1.2 exam version

Hi all, I'm in the process of preparing for this exam and was wondering if anyone knows on which ISE version this exam is based?

Announcement: Domain Spiking correlated threat detection GA

Announcement: Domain Spiking correlated threat detectionFeature OverviewCisco Secure Access in conjunction with Cisco Talos are introducing a new AI driven detection capability that identifies correlated spiking threat patterns in traffic that are in...

DHCP for VoIP phones using Access Manager

Hi there again,I'm stuck on a DHCP issue for VoIP phones in a Meraki Access Manager environment and I'm not really sure how to solve this.I'm able to authenticate both devices to access manager, but the phone never gets an IP via DHCP. I'm gonna expl...

Provisioning of Intenal DB ISE Users

Does secure access supports provisioning internal DB users of ISE for third party users use case in secure access? Is there any supporting documentation for that? 

FlexVPN with Win11 client with certificates authentication

Topology FlexVPN-Router – VPN headend. The router which the Win11 client will connect toFlexVPN-CA – root certification authority for issuing (signing) certificates for client and router. It is not needed to have it connected to topology, it can be s...

Introducing a route limit per BGP session

What's changing: Between July 10 and 17, 2026, we will introduce a limit of 10,000 routes per BGP session for Network Tunnel Groups (including Meraki AutoVPN). Impact of the change: None, unless you exceed 10,000 routes per network tunnel group. Note...

GA Announcement: Cisco SASE with Catalyst for existing Secure Access

We are thrilled to announce the expansion of SASE Management to existing Secure Access customers!  Feature OverviewCisco SASE with Catalyst now allows organizations with existing Cisco Secure Access deployments to converge into a unified SASE experie...

ISE service to be restarted with DNS/NTP modifications

I have issues with the way how Cisco designed the ISE service to be restarted every you time you make changes to the DNS and/or NTP configuration.  The underlying system is based off Redhat Linux, so what actually changes is under /etc/resolv.conf fo...

Graceful automatic shutdown of FTD

Hello communityRecently, we faced a degraded FTD device in our HA pair during a power outage. Regarding this issue, we decided to implement a graceful automatic shutdown of both FTD devices based on signals from UPS. We already have this solution wor...

Need to download from Ameriprise

Migration Configuration FDT to ASA

DearCan I use any tool to migrate configuration from 2140 FTD to 3110 ASA?regardsMM 

CSCwp21394 - wired nads failing CTS with error

Hi Also upgraded to latest ISE 3.5.0 patch 1. Switchports started failing with Could not parse the cts-pac-opaque attribute also cts data empty show cts environment-dataCTS Environment Data====================Current state = STARTLast status = Failed...

CSCwn85711 - ISE: Memory leak in EPPurgeEventHandler

Anyone else notice this issue with patch 7 of 3.2? Just opened a TAC case because our PSN memory usage has been going up for 2 weeks straight since updating to patch 7 from patch 6. Guessing as a small workaround until more is know maybe I can reboot...

Duo Identity Provider Integration with ISE

Is there a way to retrieve the Duo users/groups (duo is not integrated to any IDP such entra or AD, just a created duo users) into ISE for SGTs? I've already done the Entra integration, and I'm wondering if it's also possible to sync or retrieve grou...