Setting up posture AV definition check in ISE, i noticed latest revision dates under Policy Elements>condition>AV Compound condition to be couple of weeks old for my symantec end point protection. What cisco uses to get the proper definition update versions? I compared against bitdefender and it shows all current meaning lastest definition 12/19/2106 but with symantec it shows 12/3/16. Why is that? This creates the problem... Thanks ... View more

My customer runs public IP Addresses on their network, some old legacy stuff and it will take some time before they fully upgrade to RFC1918. My question is : is there a way to classify IP Address they use as USA IP, right now shows up initiator Country as China? Thanks ... View more

I have a customer and large deployment of ISE. They have 100s of WLAN controllers in different parts of the world. We experience occasional connectivity problems. The problem is on Wireless site, as clients can't successfully authenticate to get on the wireless network.  I am not Wireless Expert, but I see things like: 1. FAST SSID Change Enabled and Disabled on some controllers 2. SSID Broadcast Select, but WLAN Anchor Controllers do not have this checked. 3. Aironet IE enabeld and disabled 4. Authentication and Accouting Servers enabled and disabled on some Anchor Controllers. My question is : is there a best practise document out there, what is the optimal and best Wireless configuration for ISE to do CWA, and 802.1x with Posture. Thank you ... View more

1. It takes very long time for Server to Boo after applying Service Profile 2. After applying Service Profile, Server boots automatically. Problem is that I can't attach virtual Drive through my KVM Java Session when Server is up. I have to shutdown the server (takes very long time), and this takes very long time. Any ideas? Thank you ... View more

Its seems everytime i have a windows 10 and windows 7 in my POV setup at the customer, windows computers always default to Computer based Auth, if i force to use username it fails the authentication. The problem is when i run wireshark and i have windows setup to do user auth , computer never sends any responses, and i got no logs on ISE. When i change to computer it works, when i change to computer or user - it uses computer and it passed (computer member of AD group).. I do not mind computer auth, but once the user log in i want user credentials to be send to ISE. I applied all the necessary patches for windows, but i do run into these issues. I did Anyconnect NAM install and this works every time so i know my ISE config works. The customer will not allow to have any other supplicants but native windows one. ANyone run into similar problems when deploying ISE for wired windows 7/10 environments. Thankks ... View more

HOw to configure VM Ware host, with WIndows 7 guest workstation to do lab test of 802.1x authentication. I have created workstation and linked to the port on UCS, port connects to 3850 switch on access mode. how to test it? having problems with 802.1x authentication. ... View more

Question about this service and all the other services: What each service is responsible for? sh processes log  Process          PID     Normal-exit  Stack  Core   Log-create-time ---------------  ------  -----------  -----  -----  --------------- snmpd            3395              N      Y      Y  Tue Jul  1 10:03:39 2014 snmpd            3426              N      Y      N  Tue Jul  1 09:26:43 2014 vsh              7038              N      N      N  Tue Jul  1 09:32:53 2014 vsh              7880              N      N      N  Tue Jul  1 09:45:34 2014 vsh              8090              N      N      N  Tue Jul  1 09:48:42 2014 vsh              8229              N      N      N  Tue Jul  1 09:51:51 2014 xmlma            3404              N      Y      N  Tue Jul  1 09:15:09 2014 LSL-N5K#    My nexus crashed due to XMLMA, and i want to know what uses this service to troubleshoot further..  sh system reset-reason  2) At 376645 usecs after Tue Jul  1 09:15:18 2014     Reason: Reset triggered due to HA policy of Reset     Service: xmlma hap reset     Version: 6.0(2)N2(2)     ... View more

HOw to setup BGP so it will not get advertised to specific AS.   Example: My BGP AS 1000 and i peer with AS 2000 and 3000. I want to tell BGP AS 2000 not to advertise to AS 100, and 200.    Or i want to advertise my blocks to all internet but i want to make sure AS 100 and 200 wont have my prefix in the BGP table.     thanks     ... View more