Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,I am working on Cisco ISE (version 2.7, patch 5) integration with the 3rd party network device. According to the Admin Guide of the network device, the "User-Name" attribute MUST be included in CoA or Disconnect request. So I created a new Network...
Hi,Currently I am integrating ISE(software version: v2.7, patch 5) with Fortinet switch. And my endpoint which is connected to the switch has been authenticated from ISE successfully, just like the snapshot below. However, in Live Sessions, "IP Addre...
hi Cisco,I deployed one Cisco ISE VM(version 2.7.0) in VMware ESXi. I'm working on REST API of ISE. My requirement is to quarantine/un-quarantine the IP address of endpoints by REST API. Right now I have 2 questions:1. I tried to use "/ers/config/anc...
hi,I used Postman to call REST API. Basically you need to configure "Auth" by username and password, and set url and json data properly. For example, if you want to quarantine endpoints by mac address, set "name" to "macAddress". Simply reference the...
hi hslai, Just now I set the value of "User-Name" attribute to 0. The result is same as before. No "User-Name" AVP is included in Disconnect Request. Even I directly applied HPWired on Device Profile:From the packets dumped from ISE, Disconnect Reque...
hi Greg,I referenced your suggestions and got a big progress on the topic. right now IP address shows up there!However, the AVPs of Disconnect Request sent from ISE didn't included the attributes I defined in Network Device Profiles. FortiSwitch is ...
hi Mohammed,yes, I created a new authorization profile named ftnt_quarantine_profile and applied the device profile in Network Device Profile as well. furthermore I added Framed-IP-Address to Advanced Attributes Settings like below. In Authorization ...
Hi Marcelo,Actually the endpoint and ISE are deployed in VM. I think this is why Endpoint Profile shows VMWare-Device. ISE should be OK to work with an endpoint in VM environment. And currently I deployed only one endpoint in VM.As you saw, Current I...
