Hi, I posted a similar question about certificates but, this is more of do I need to have the EAP CSR signed....   I have a small ISE 2.4 install with Windows 10 clients. On the client side in windows we are not checking the "validate server certificate". I know this is necessarily not secure. If that is the case do I still need to generate a CSR and get the EAP certificate signed by a CA? Can I just leave it binded to the default self signed certificate if I'm not validating it in windows?   Thanks, Dan ... View more

Hi, I'm having a hard time trying to figure out if we need just the basic Compliance recording license "CCX-11-CR-LIC" or something more.   We have UCCX 11.5 and are looking to do call recordings on our agents. I think its pretty basic just need to make sure the calls are recorded and for the supervisors to have a web interface to view these calls. I understand that I will need to spin up a windows server and SQL server for the recordings. Does the above license include the front end media? Besides the above do we need to include anything else. I see some talk about Work Force Management and Quality Management servers...is that really needed in my case? Can the windows servers be installed on a physical server or is VMware/Hyper-V needed.   Thanks, Dan   ... View more

Hi we are looking at purchasing StealthWatch for VMware and to get started I need some clarification on what part numbers and how many per part.    Cisco Stealthwatch Enterprise Data Sheet https://www.cisco.com/c/en/us/products/collateral/security/stealthwatch/datasheet-c78-739398.html   For just the VMware appliance do I only need the following part numbers:   Cisco Stealthwatch Flow Collector Virtual Edition L-ST-FC-VE-K9 Cisco Stealthwatch Management Console Virtual Edition L-ST-SMC-VE-K9 Cisco Stealthwatch Flow Sensor, Virtual Edition L-ST-FS-VE-K9   Would I just need one of each of the above? Can I just get away with 1 flow connector and 1 Management console?   Thanks, Dan ... View more

Hi we have a new installation of ISE version 2.4 in a distributed deployment with two nodes. We have a legacy WLAN that we use for IPADS that does mac authentication and uses AD suthingication via PEAP on ACS 5 that I need to migrate to ISE.   Previously I had to generate a Certificate from one of our domain controllers to allow the IPAD's to accept the certificate and send out to the IPADs.   Has there been an option in ISE that I can just allow the IPAD's on the network without verifying the certificate, such has on our windows computers via Group Policy I have that option disabled.   And if not is there any updated online walk thru to to generate this certificate with Windows Active Directory IIS and install on ISE?   Thanks, Dan ... View more

Hi, I'm looking at purchasing dual 2110 to run in HA mode to replace two Cisco ASA 5510's in HA.   Is there any additional licenses needed to run the 2110's in ASA mode?   I assume that depending on the version of version of code I'm running on the ASA 5510's that I can upgraded them to the same version of ASA code that the 2110 will be running and simply upload the config over?   Thanks, Dan ... View more