Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hmm, a couple of thoughts to try: 1. Your first screenshot doesn't have the option selected to use the computer cert. I'd try selecting that to rule it out.2. What do your authentication policies look like? Were you using TEAP successfully before thi...
I recently did this successfully. I'll list out what I do and you can tell me if you've done this as well. I migrated from MSCHAPv2 using the NAM module to EAP-TLS with native Windows.Wired 802.1x Policy SetTEAP Authentication Policy = TEAP using Cer...
You can definitely do this with ISE - it just depends on how scalable you need it to be and what kind of visibility you need to have. I'll give an example - previous engineers at my workplace put APs and Printers on the same VLAN. I had since upgrade...
This could be an issue with DTLS Flow-Offload, which is a dedicated resource on the FTDs to support VPN connectivity. My FWs randomly rebooted a few months ago and, by the grace of God, I was SSHd into one of them and caught the messages. If you disa...
Definitely try to fix HA first, then upgrade. Cisco has a known issue, like the one in the link below, that causes the HA link to fail, or even worse, split brain and try to send your traffic out of both of your firewalls, which will disrupt the traf...
