About KatoNakatomi

KatoNakatomi · 04-17-2024

We have implemented 802.1x with machine certificate authentication.The certificate validation is via OCSP and the question is does Cisco ISE support connection to OSCP via a Web Proxy? The assumption is that the connection would be using the system p...

KatoNakatomi · 04-28-2023

I have deleted the Inventory in the SNTC portal; I have created a new entitlement and applied to the CSPC with new inventory name yet when I look on the portal I see the old inventory populated and this is updated with the correct data but also has o...

KatoNakatomi · 12-01-2022

Implementing 802.1x using machine certificates issues to endpoint through IntuneCan Cisco ISE 3.2 EAP-TLS with Microsoft Azure Active Directory connection using machine certificate to authenticate the endpoint onto the network?The article note in Con...

KatoNakatomi · 08-11-2021

Replacing existing WLC5508 with WLC9800 (17.3.3). Using same Guest WiFi with existing external captive portal server. End users devices connecting to the Guest WiFi for the first time are redirected to the external but the external portal is not disp...

KatoNakatomi · 01-27-2021

Where can I find the maximum resource available in the ASA5585-SSP-20 for the following? Rate limited resource types:Conns Connections/secInspects Inspects/secSyslogs Syslogs/secAbsolute limit types:Conns ConnectionsHosts HostsMac-addresses MAC Addre...

KatoNakatomi · 04-23-2024

Cisco TAC has advised OCSP connections through a web proxy is not supported by Cisco ISE.

KatoNakatomi · 04-18-2024

The OCSP server is an externally hosted outside the organisation, thus requiring the web traffic to traverse a web proxy. We will try the tcpdump on ISE nodes or have the team check the DNS servers if there is any record of the ISE node trying to res...

KatoNakatomi · 04-17-2024

The challenge is we need the ISE connection to the OCSP server go through a Web Proxy? Is this supported?

KatoNakatomi · 08-12-2021

Thank you, I have a case with TAC . We are seeing a lot of this chatter for affected client MAC address. Aug 12 13:10:20 kernel: [*08/12/2021 13:10:20.2340] chatter: client_ip_table :: ClientIPTable:Client (6A:5A:AA:49:BF:9D) not found for webauthA...

KatoNakatomi · 08-12-2021

We are using Flex Connect (central auth \ local switching).We were advised by Cisco TAC on another issue to upgrade to 17.3.3.

Member Since	‎10-08-2007 11:41 AM
Date Last Visited	‎04-24-2024 12:05 AM
Posts	24

User Statistics

User Activity

Cisco ISE 3.2.0.542 External Identity Store Cert Auth via Proxy

Cisco Smart Collector Inventory on SNTC Portal Showing Old Objects

Cisco ISE 3.2 EAP-TLS with Microsoft AAD with Machine Certs

Cisco 9800 Captive Portal Re-Direct to External Web Server

ASA5585-SSP-20 Max Systems Resources

Re: Cisco ISE 3.2.0.542 External Identity Store Cert Auth via Proxy

Re: Cisco ISE 3.2.0.542 External Identity Store Cert Auth via Proxy

Re: Cisco ISE 3.2.0.542 External Identity Store Cert Auth via Proxy

Re: Cisco 9800 Captive Portal Re-Direct to External Web Server

Re: Cisco 9800 Captive Portal Re-Direct to External Web Server