Run URT in Production, and it shows more than 1200 minutes for MnT nodes. We did purge logs, etc and time did not change. Do I need to reload the server after the purge? what do i need to do to bring this time down.   Thank you ... View more

has anyone set this up before? I did pretty basic setup 2x4150 per data center and 2x7702 per data center (HSRP, etc). Similar setups with 9300 worked just fine (few differences) We did best practises with site ips, MAC filters, etc and everything works but occasionally we have drops, timeouts, etc   any pointers or other people that have experience issues with clustering asas/ftds across data centers. feel free to reach out privately or on forum..     ... View more

Setting up posture AV definition check in ISE, i noticed latest revision dates under Policy Elements>condition>AV Compound condition to be couple of weeks old for my symantec end point protection. What cisco uses to get the proper definition update versions? I compared against bitdefender and it shows all current meaning lastest definition 12/19/2106 but with symantec it shows 12/3/16. Why is that? This creates the problem... Thanks ... View more

My customer runs public IP Addresses on their network, some old legacy stuff and it will take some time before they fully upgrade to RFC1918. My question is : is there a way to classify IP Address they use as USA IP, right now shows up initiator Country as China? Thanks ... View more

I have a customer and large deployment of ISE. They have 100s of WLAN controllers in different parts of the world. We experience occasional connectivity problems. The problem is on Wireless site, as clients can't successfully authenticate to get on the wireless network.  I am not Wireless Expert, but I see things like: 1. FAST SSID Change Enabled and Disabled on some controllers 2. SSID Broadcast Select, but WLAN Anchor Controllers do not have this checked. 3. Aironet IE enabeld and disabled 4. Authentication and Accouting Servers enabled and disabled on some Anchor Controllers. My question is : is there a best practise document out there, what is the optimal and best Wireless configuration for ISE to do CWA, and 802.1x with Posture. Thank you ... View more

1. It takes very long time for Server to Boo after applying Service Profile 2. After applying Service Profile, Server boots automatically. Problem is that I can't attach virtual Drive through my KVM Java Session when Server is up. I have to shutdown the server (takes very long time), and this takes very long time. Any ideas? Thank you ... View more

I have a similar problem. I have 2 ASAs setup one with Tunnel Group, Redirect ACL and RAIDUS/ISE Config which when authenticated ISE posture agent runs all the checks. And another one with LDAP Authentication (NO ISE) and when user authenticate through this one, ISE POsture agent starts the compliancy process again.. How can we filter this? Thank you ... View more