About macayubi

macayubi · 06-28-2018

Hi All,We're currently working on a customer POV wherein we need to push customized NAM profile (wired only) to anyconnect. Can this be done via SCCM? or can only be achieved through client provisioning from ISE?Requirement:Made a customization of NA...

macayubi · 08-14-2017

Hi,Currently deploying ISE for BYOD and encountering issues with Go Daddy Cert. TAC and software escalation team identified that the issue is due to Go Daddy CA being cross-signed causing issues with apple and android devices.Do we have any recommend...

macayubi · 07-26-2017

Hi All,We're currently working on a BYOD POV and encountered this issue,Setup: Dual SSID BYOD1. IOS device successfully on-board and was able to download NSP profile along with EAP-TLS cert for wifi authentication2. When user tried to remove the prof...

macayubi · 07-19-2017

Hi Team,I have a customer who requires installation of 3rd party certificates during BYOD enrollment. Can ISE include these certs as part of provisioning policy? If not, any recommended workarounds? thanksMark cayubit

macayubi · 07-12-2017

Hi All,do we have a list of supported Cisco and Non-Cisco devices for TACACS+ on ISE? ISE Compatibility guide does not mention anything about TACACS+ compatibilityRegards,Mark

macayubi · 01-23-2018

Alright, thanks!

macayubi · 01-23-2018

Hi Craig, going back to the scenario above - Worst case, when the link between P-PAN and S-PAN goes down. Can i go to my S-PAN and promote it as another P-PAN to serve its PSN (standalone deployment) and to serve radius requests within its DC locatio...

macayubi · 01-17-2018

Thanks Craig. I just went through the admin guide, Cisco Identity Services Engine Administrator Guide, Release 2.2 - Set Up Cisco ISE in a Distributed Environment - Cisc…It says here that Posture will still work when Primary PAN goes down and the Sec...

macayubi · 01-17-2018

How about for this scenario: 1) ISE 1 (Primary PAN/MNT, PSN) @ DC 1 while ISE 2 (Secondary PAN/MNT, PSN) @ DC 2 -> connected via MPLS2) NADs located at DC 1 will be served by ISE 1 with ISE 2 as the secondary PSN, then vice versa for the NADs @ DC 2W...

macayubi · 07-12-2017

Thanks. Customer is primarily concerned on 3rd party devices such as bluecoat etc. Can we also authorize and account commands for these devices (assuming CLI is available) similar to to what we can provide for Cisco devices.

Member Since	‎03-12-2014 06:02 PM
Date Last Visited	‎10-26-2018 12:04 AM
Posts	14
Total Helpful Votes Received	2

User Statistics

User Activity

Deploying Customized NAM profile via SCCM?

Recommended Public CA for ISE BYOD Deployment

BYOD IOS device can still connect to SSID even if profile is removed

ISE- BYOD 3rd Party cert

Supported Cisco and Non Cisco Devices - TACACS+

Re: ISE HA scenario

Re: ISE HA scenario

Re: ISE HA scenario

Re: ISE HA scenario

Re: Supported Cisco and Non Cisco Devices - TACACS+