We are in the process of refreshing M3 Blades with M5 at 2 different locations.  The first location had 2 B200 M3 blades in a ESXi Cluster, we were able to replace the first blade with a M5 and attach the original M3 service profile and bring the bade into service within Vcenter.  All VM's were then migrated from the M3 to the M5 using Sandy Bridge EVC.  Then the other M3 blade was replaced, vm's separated between the 2 servers without issue.   Second site had 2 M3 blades and only 1 of them (off the books) is being replaced with a M5 blade.  Did the same process, moved all vm's M3, replaced the M3 with M5 and assigned service profile.  Vcenter will not allow for the migration of vm's to the M5 due to incompatibility.  Vcenter will not allow for the selection of EVC Sandy bridge as it states it is not compatible.  I am verifying the same firmware is being used, but I am not finding anything that would explain why one site allowed the the blades to coexist but the other will not.  Vcenter version is the same on both sites.   Please advise,   Joe  ... View more

We are in the process of testing deployment of NAM with SCCM.  If the user is on VPN they are disconnected during the install, can this be prevented?  Our goal is to deploy the NAM module on our workstations/laptops prior to any 802.1X enforcement.  We currently have the ISE in monitoring mode and only a few ports configured for 802.1X allowing MAB as well.  I have deployed a policy for both wired and wireless that allows for 802.1X.  I have not removed the laptop from our corporate network and attempted to join a non corp wireless network.  How does Anyconnect NAM react if there is no corp network available, will it use a predefined "home" network and allow the users to connect as they normally would?   Thanks,   Joe   ... View more

We have a raid 1 with 2 drives in a b series server and have purchase 2 larger drives. Is the process as simple as pulling one drive and letting it rebuild then replacing second. Once the raid is healthy extending space. The OS is windows installed on the blade.    Thanks,   Joe ... View more

We have around 1500 vpn clients and would like to utilize the internal CA on ISE to issue/revoke certificates.  Is this a supported deployment?  We have different authentication methods for specific vpn users (AD/RSA) and utilize a certificate map to trigger the tunnel group and ISE authentication policies to match.  We would like to be able utilize scep from the ASA to ISE to issue specific client certs.  We have this working but don't want to deploy if using the internal ISE CA in this fashion is not advise/supported.   Thanks,   Joe ... View more