Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a standalone Cisco ISE-PIC virtual machine and as of a few days ago whenever I browse to the web interface (https://isepic_IP_FQDN) I get "ISEPIC_FQDN refused to connect". I have tried the following:confirmed DNS resolves the FQDN correctly a...
I have ISE-PIC 3.2.0.542 Patch 5 which is successfully receiving user login sessions from AD agent but it is not sending username-IP mappings our WSA web proxy (15.2.0-164).WSA can connect to ISE-PIC via pxGrid and query user sessions and AD groups b...
I want to force users to log onto CP-8841 phones with a PIN or a user password instead of just anyone being able to use a phone that is registered to my CUCM. Can please someone explain how to do this? My environment has a CUCM 12.5.1 and CP-8841 pho...
I am trying to change the TTL on username-to-IP mappings learnt from ISE-PIC on Web Security Appliance (software version 14.5.1-016) from the default 6 hours to 1 hour. This can be seen by issusing the command "isedata > cache > show", selecting an I...
I want ISE-PIC 3.1 to detect user log off events so that Web Security Agent (WSA) removes the session from its ISE username-to-IP mappings.I have ISE-PIC 3.1.0.518 Patch 3 with Active Directory Agent deployed to AD servers and integrated with WSA 14....
Thanks guys, that is good information. The ISE-PIC vm (RHEL8, compatibility ESXi 70. U2 and later) is on VMware vCenter 7.0.3T build 24322018.I have taken a snapshot of the ISE-PIC VM in the past so perhaps that has caused the web interface service ...
Thanks ahollifield. I don't understand understand how it can be a resource or snapshot issue. The CPU, RAM and disk utilisation is very low. However I increased CPU to 16 and RAM to 64GB. Utilisation graphs attached. The spikes are during reload afte...
Thanks hslai.Is it possible to change the TTL on username-to-IP mappings on the Web Security Appliance (software version 14.5.1-016)? If so I can change it to match the session timeout I have set on ISE-PIC.By default username-to-IP mappings received...
