Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello team,Have anyone of you experienced with upgrade the ISE Evaluation 2.7 to 3.1 ?I somehow facing a problem in the "Prepare to Upgrade" stage as the "Platform Support Check" states that it needs at least 12 CPU for the upgrade.I check on the eva...
Hello team, I do have some concerns about my NTP configuration on Cisco ISE.My question is that, by changing the primary NTP server to a new one, do we need to restart the service or reboot the ISE node (I have 3 nodes in the cluster)? Current:NTP se...
Hi team,I would like to ask if anyone here has experienced disabling the auto-update of AnyConnect on Cisco ISE.The idea here is that I would want my clients - some of them run the 4.9 and some to run 4.10 parallelly. I would be really appreciated it...
Hi Team,I would like to seek some help on an issue when AD users change their password, ISE does not get synced and therefore, users are not able to log in to Windows.Some users are able to log in to Windows but after a while, an AD credential input ...
Hi Team,I am thinking of coming up with plans and ideas to form a procedure for how we can disable the Network Access Control of Cisco ISE entirely (in my case, it is wired 802.1x and VPN integration with FTD) in the event of a disaster of every node...
Thanks everyone for your insight on this.I have figured out the solution by increasing the CPU to 12 and rebooting the nodes.After that, the checklist before the upgrade does not complain about this issue anymore.
Hi Kasun, thanks for the insight on this. However, I am doing this upgrade to see the upgrade process as well as evaluating the configuration I have on the 2.7 when upgraded on 3.1 (I restored the back up from my Produciton 2.7).This is a pre-upgrade...
Hi balaji,All clients are connecting to the ISE cluster. We will push the 4.10 to clients via SCCM but the problem is with our ISE Client Provisioning policy.There will be 2 CPP policies (ANY in the identity group condition, Windows, no other conditi...
Hi balaji, Thanks for your solution on this.Also, clients in my environment are running 4.9 and I want to upgrade them to 4.10 phase by phase (by the helpdesk team) through SCCM without the hassle of specifying AD group or sth like that.The ultimate ...
Hi @Rob Ingram , Thanks for your response.Yes, users mostly change via Ctrl-Alt-DelUsers in my environment are authenticated with 2 steps:1. Machine certificate2. MSCHAPv2Computers are domain-joined.802.1x credentials are in 2 scenarios:They passed t...