I have a request on an ISE 3.0 setup to use AD authentication on wireless 802.1x (5520 WLC) to specicify specific ACLs but also only allow access from corporate machines so a user can't pull up their ipad and enter in their AD credentials. From my re...
I am having issues getting ISE posturing to work. Had issues with the client and tried to set it up in the lab and still can't get it to work right. Using an older windows 7 laptop with Anyconnect and the ISE posture module installed (4.10). Switc...
Recently installed a new ASA with firepower solution (version 6.1) and they have an existing FireAMP deployment. I go into defense center and go to AMP->AMP management and tell it to register with the cloud and then get redirected to the fireAMP lo...
I am doing an evaluation of LMS 4.0. I have loaded the system on Windows and manually added my core 3750 switch into the system. Device availablity is showing the device as available. However, the other pollers like link utilization, error count, ...
I have a VPN tunnel from an ASA 5500 running 8.0.4 to a Nortel Contivity device. Periodically the tunnel will just stop passing traffic (do not see encap or decap numbers increasing) but the tunnel will still be up. After a clear crypto ipsec on th...
Appreciate your reply. So I think I was under the understanding that an "unknown posture" redirect would then direct the anyconnect posture client to download the ISE posture config. Was that an incorrect assumption? I don't want to mess with the...
Two things
1) Just becasue you have drop when inline checked doesnt mean everything will be droped. Each individual signature can be set to log only or log and drop so it is possible that they rule is set just to log but not block. You would need ...
I do not know the answer to the connection question but I may be able to help on the session question.Now, if you are referring to session replciation between two ACE modules? If so, you can do 'sho sticky database detail' and you will see two lines...
