default is 20 per page, you can set it to a max of 100 with the size=100 parameter in the url, there is no way to get all in one request if you are above 100. ... View more

ok, thanks for the reply ... View more

So, could you shed some light on question 2? 2. Can you explain more ? Which certificate are we talking about ? This would be the SQL server certificate we need to validate as a SQL client in ISE. Does ISE accept *any* certificate CN/subject name as long as the cert is signed by an approved CA? Or does ISE check the certificate CN against eg. the ODBC connection server name entered in ISE? ... View more

Understood, i will let my local SE figure out how to keep us informed. ... View more

@Surendra wrote: Answering your questions in order. 1. No, it is not possible to choose a specific CA certificate. ISE will validate aganist all the certs in the store. 2. Can you explain more ? Which certificate are we talking about ? Since we can't decide what certs to trust on a per-certificate basis be only on a trusted CA basis, it would be nice if ISE only accepted the servers certificate if it contained a certain CN, or if the CN had to match the configured server fqdn in the ODBC configuration of ISE, 3. No. Currently ISE does not support enforcement of trust. There is an internal enhancement request open for this. Great, is it possible to share that information with the local SE so we might track that enhancement request?   ... View more

Hi Surendra, I am the guy that was asking Tue about this, and i have my customer the information you provided, thanks you for that. The Customer has some further questions into this, maybe you are able to answer them ? --- According to the documentation and your statement, Cisco ISE is using the JDBC encrypt property set to true. That's good news, but without further information this raises a few concerns. According to the JDBC documentation [1], using encrypt=true only enables encryption if the server specifies a certificate. This would signify that ISE does not *require* encryption but merely request it, and thus is still vulnerable to the aforementioned vulnerability. Are there any supplemental properties set to enforce encryption? Both the encrypt property and the new authentication property since JDBC version 6 does not document whether or how it's possible to enforce and require authentication. Rather, it looks like both properties merely *request* encryption, still leaving Cisco ISE open to the attack. Also, how is the server certificate verified, and what CA is used? This should be specified through trustServerCertificate, hostNameInCertificate and trustStore which are set to unknown values or defaults in ISE - and definitely not documented. In summary: * Is it possible to specify which CA certificates in the ISE Trust Store can be used for verifying the MSSQL server certificate? * Is it possible to specify which SubjectName is permitted in the certificate, or is it set automatically based on another parameter? * Is it possible to specify encryption is to be *required* and not merely *requested*? ... View more

The problem is that the issues you may run into at some point won't just be performance, but actual damage to the system, like database corruption and such. This i have seen many times now. ... View more

Be very carefull with using interface id's for anything in a stack, if you have to rebuild the stack, or change a switch in the stack, you run the risk of the numbering changing if you are not careful. Not running stacks is a much better solution to this. ... View more

No, ISE does not have windows updates nor does it deploy updates to your clients. What it does do is if you are using posture, you can have ise/anyconnect start the windows update process on the pc's if they haven't been updated. ... View more

I would say medium, as those specs you posted are equal to the ones from the SNS-3595, which is what the medium license covers. ... View more

Just an addition, be aware that the small, medium, large names do not correspond to the deployment models that we use when scaling ise solutions.    VM Small = 3515 Sized VM VM Medium = 3595 Sized VM VM Large = Super MNT Sized VM (lots more memory mainly) ... View more

  11 R-ISE-VML-K9= $ 25200.00   NEW Cisco ISE Virtual Machine Large   12 R-ISE-VMM-K9= $ 12600.00   NEW Cisco ISE Virtual Machine Medium   13 R-ISE-VMS-K9= $ 6700.00   NEW Cisco ISE Virtual Machine Small ... View more

Sounds good, looking forward to it. Jan ... View more