About martucci

martucci · 03-10-2020

Hello, customer would like to have a timed access to the GUI from the admin.The administrator will be able to make changes only out of business hours, while reporting would be available always. I have not seen a way to assign a time specific access a...

martucci · 09-13-2019

A customer is asking which license is needed on the 3850 to run Device Sensor, as e found conflicting information on 2 different links. Can you please confirm (I believe the second link should be correct), and possibly clarify the documentation? Fr...

martucci · 07-10-2019

Hello, I have a customer that went the Forescout way, but is not looking to move to ISE for Access (AuthC and authZ). But wold like to keep Forecout for profiling (not to have to throw it away completely). Do we have anyone doing it, and what would ...

martucci · 05-09-2019

I have a customer asking for integration between ISE and Apple Open Direcory. I did a quick search and it seems that they use OpenLDAP, which is an open-source implementation of LDAP. Has anyone tried and knows if it might work? Thanks

martucci · 03-08-2019

Hello, I have a customer with a very specific request. They would like a portal flow somehow in between the hotspot and credentialed account. Ideally, they want the customer (this is a bank thinking abut guest access in the branches), to enter onl...

martucci · 07-11-2019

Thanks Tim, yes, I am aware of the different solution, I was just wondering if there was some way to make them talk, even with customer scrips, as I have heard of customers using both, so was interested to hear if they had fully parallel deployment n...

martucci · 12-05-2018

Thanks a lot! That might definitively work, I will discuss with the customer !

martucci · 11-30-2018

Thanks, but the issue in doing it this way, would be that for every port they need to have a rule, so it would easily go out of hand in terms of scaling. It should be done in a better way so that the number of rules can be contained.

martucci · 11-19-2018

Thanks Hsing, We will ask the customer to test with GTC hat is a plain text password (they will have to use AnyConnect for that. Should it work as it is plain text? Thanks a lot

martucci · 11-16-2018

Hi Hsing, thanks. so for dot1x, ISE will always speak NTLM to AD, and the protocol cannot be disabled , in order to enable Kerberos only?

Member Since	‎02-03-2003 02:28 PM
Date Last Visited	‎03-18-2025 02:44 AM
Posts	87
Total Helpful Votes Received	19

User Statistics

User Activity

Timed Access to the GUI

Which license on 3850 for Device Sensor?

ISE for access and Forescout for profiling

ISE and Apple Open Directory

Customization of Guest flow to have only one page (not login plus account creation page)

Re: ISE for access and Forescout for profiling

Re: Forcing a MAC on a specific port with MAB

Re: Forcing a MAC on a specific port with MAB

Re: ISE and Kerberos only AD

Re: ISE and Kerberos only AD