Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Jason Kunst
Jason Kunst
Member since
02-10-2011
Cisco Employee
With Cisco since 2005 working in Security Products on Cisco NAC and ISE
CCNP, CCIP, CCNA Security, Toastmasters CL
Biography from communities:
Technical Marketing Engineer in Cisco’s Policy and Access group focused on Cisco’s Identity Services Engine (ISE). Jason’s area of specialty is ISE Guest Access Management and wireless networking, providing Cisco’s Global Field and Partners with support and training. Jason has over 15 years of industry experience, and joined Cisco in 2006. During Jason's Cisco tenure, he has held positions that include Lead Engineer for Cisco NAC and ISE Alpha networks and Senior Test Engineer for Cisco NAC Products. Prior to joining Cisco he held various roles in Network Support for various entities in government, military and enterprise companies. Jason holds a Bachelor’s degree from Fitchburg State College and industry certifications including: CISSP, CCNP R&S and CCNA Security.
Expertise:
Wireless, Security, AAA, Guest, RADIUS, dot1x
With Cisco since 2005 working in Security Products on Cisco NAC and ISE
CCNP, CCIP, CCNA Security, Toastmasters CL
Biography from communities:
Technical Marketing Engineer in Cisco’s Policy and Access group focused on Cisco’s Identity Services Engine (ISE). Jason’s area of specialty is ISE Guest Access Management and wireless networking, providing Cisco’s Glob
Created by
Jason Kunst
in Policy and Access
in Policy and Access
06-16-2019
01:46 PM
06-16-2019
01:46 PM
Please look at the recommendations here as well https://community.cisco.com/t5/security-documents/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515
... View more
Created by
Jason Kunst
in Policy and Access
in Policy and Access
06-14-2019
06:06 AM
06-14-2019
06:06 AM
No there isn’t a setting for that
... View more
Created by
Jason Kunst
in Policy and Access
in Policy and Access
06-13-2019
04:26 AM
06-13-2019
04:26 AM
If you’re having intermittent problems with access the guest portal I would recommend working with tac to troubleshoot where exactly the breakdown is occurring Make sure to be running recommended release of ise and your wireless controller to start For guidelines Please look under http://cs.co/ise-help for how to ask for community help under the resources section You can look at the prescriptive guest guide under http://cs.co/ise-guest for general configuration information as well
... View more
06-11-2019
09:59 AM
Thanks arne, you can also look at BRKSEC-3432 and the other performance and scale overview at https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId-118574828
... View more
06-06-2019
11:17 AM
The guide is step by step with your flow. I would suggest reaching out to tac or cisco partner if you need more handholding.
... View more
06-06-2019
07:42 AM
Please start over and use the guide I provided. You made changes to the authentication policy that’s not needed for basic configuration. Reset what you’re doing and look through the validated flows in the guide If you’re still have problems I would recommend a tac case in real time.
... View more
06-06-2019
03:58 AM
Did you look at the prescriptive guest guide under http://cs.co/ise-guest to start? This is a step by step guide Otherwise did you check why you’re hitting the bottom default policy why it’s not matching to redirect? Perhaps share your policy set authorization rules?
... View more
06-05-2019
08:21 AM
We don’t test every release, our compatibility guides are a general guideline, you can check with the switching team to make sure they have support of basic AAA, dot1x RADIUS etc. Here is a good explanation. https://community.cisco.com/t5/security-documents/does-ise-support-my-network-access-device/ta-p/3650231
... View more
Created by
Jason Kunst
in Security Documents
in Security Documents
06-04-2019
06:36 AM
06-04-2019
06:36 AM
@AFToast you need to export the certificate from tenable and install in trusted certificates on ISE and vice versa
... View more
Created by
Jason Kunst
in Security Documents
in Security Documents
06-03-2019
09:59 AM
06-03-2019
09:59 AM
I would also recommend checking out http://cs.co/ise-help and lokoking for how to get help in the community, the tac can support this if you’re looking for urgent care
... View more
Created by
Jason Kunst
in Policy and Access
in Policy and Access
06-03-2019
09:28 AM
06-03-2019
09:28 AM
From our developers - Yes, that script is working fine but it is accepting invalid CPF IDs as well. I would recommend reaching out to me at jakunst@cisco.com
... View more
Created by
Jason Kunst
in Policy and Access
in Policy and Access
05-30-2019
10:33 AM
05-30-2019
10:33 AM
I have asked our SMEs to take a look on this
... View more
Created by
Jason Kunst
in Policy and Access
in Policy and Access
05-30-2019
08:35 AM
05-30-2019
08:35 AM
Right now this is looking to be a little more work then normal scripting requests and doubtful we can deliver without an engagement with a vendor that does advanced customization. If you would like to engage a vendor very familiar with ISE then please reach out to me directly with your mailing address
... View more
Created by
Jason Kunst
in Policy and Access
in Policy and Access
05-29-2019
01:10 PM
05-29-2019
01:10 PM
@kthiruve is our SME, i have reached out. Please do move to ISE
... View more
Created by
Jason Kunst
in Policy and Access
in Policy and Access
05-29-2019
09:59 AM
05-29-2019
09:59 AM
They are both valid options of manual assignment. Would recommend MAB to VOICE VLAN
... View more
Created by
Jason Kunst
in Identity Services Engine (ISE)
12m ago
12m ago
Like this article you’ll need to make sure that DNS is resolving to the
correct name of the
certhttp...
Created by
Jason Kunst
in Identity Services Engine (ISE)
49m ago
49m ago
To use BYOD flow with certificates in this case would be very cumbersome
as there are 5000 apple ipa...
Created by
Jason Kunst
in Identity Services Engine (ISE)
an hour ago
an hour ago
You need a well known public certificate like one from SSL, godaddy,
verisign etc. Otherwise the use...
Created by
Jason Kunst
in Identity Services Engine (ISE)
2 hours ago
2 hours ago
If it’s under 10k "ACTIVE" endpoints then you can use the 3615
Created by
Jason Kunst
in Identity Services Engine (ISE)
3 hours ago
3 hours ago
A couple holes here, provided I have all the information? You didn’t say
the type of devices and why...
4 hours ago
Handy tidbit
herehttps://community.cisco.com/t5/security-documents/does-ise-support-my-network-acces...
Created by
Jason Kunst
in Policy and Access
yesterday
yesterday
Please look at the recommendations here as
wellhttps://community.cisco.com/t5/security-documents/ise...
Saturday
Damien is an expert :) please take his word as gold I have asked our
documentation team and SME To f...
Created by
Jason Kunst
in Identity Services Engine (ISE)
Thursday
Thursday
Have you looked at the Cisco Live content on
this?http://cs.co/ise-trainingWhat's new in ISE Active ...
Created by
Jason Kunst
in Identity Services Engine (ISE)
Thursday
Thursday
Please work through ise feedback and or your account team, the feature
is not in discussion here and...
Created by
Jason Kunst
in Policy and Access
Thursday
Thursday
If you’re having intermittent problems with access the guest portal I
would recommend working with t...
Created by
Jason Kunst
in Identity Services Engine (ISE)
Wednesday
Wednesday
Sounds like dot1x is failing on the laptops and it’s falling back to MAB
and redirect to guest porta...
Wednesday
I don’t know when it changed . I am seeing on 2.4. Unfortunately I don’t
work with the older release...
Created by
Jason Kunst
in Identity Services Engine (ISE)
Tuesday
Tuesday
You will need to get the IP in the cert or get your DNS to resolve.Here
is a thread on your issue
ht...
Public Statistics
| Date Registered | 02-10-2011 07:52 PM |
| Date Last Visited | 06-17-2019 07:18 AM |
| Total Messages Posted | 3,755 |
| Total Helpful Votes Received | 1521 |
.jpg "VIP Advocate"){kind=icon}
