I have ISE 2.4.0.357 serving RADIUS to some Cat4k 4510R-E ( running 03.06.05E ) switches for wired NAC using dot1x with EAP-TLS. The back end identity store is MS AD, with MS CA server issued certificates, distributed via GPO. That all works nicely e...