About JPavonM

JPavonM · 08-02-2024

Hi chaps, Anybody knows how to silently drop unwanted authentication tries in the Default policy to avoid Rapid7 scanning for default usernames not appearing in the Logs? I0m runinng ISE 3.3Patch2 and my device admin authentication policies (TACACS+)...

JPavonM · 07-24-2024

I've found multiple answers to license consumptions in Cisco ISE, but it is not clear when an Essential license is accounted- (https://community.cisco.com/t5/network-access-control/ise-license-consumption/m-p/4283900/highlight/true#M565163 from @Marc...

JPavonM · 07-11-2024

I canot find the answer to this question on ISE Admin guide, and it seems to me that Node Group only functionality is to detect a failure between PSN nodes that belong to a specific group so to keep the sessions active. (I may be wrong) Is it possibl...

JPavonM · 06-10-2024

Hi colleagues, Does anybody knows if there is a way to use push notification and not OTC when using Ciso ISE and MS NPS with EntraID extension to perform the 2FA authentication for device admin? I can't make it to use that option and I always receive...

JPavonM · 05-31-2024

Hi wireless colleagues, After multiple tries with the configurations I have managed to enable MFA on the C9800 for admin access through CLI by using TACACS+. The integration is done via ISE with NPS as Proxy RADIUS to Entra ID MFA Service in the clou...

JPavonM · 08-08-2024

There are some differences in Windows supplicant between versions, even between Windows 11 minor versions. Try the simple way to disable "validate server certificate" and update all Windows devices to the same version, and drivers to the latest versi...

JPavonM · 08-07-2024

I seems like you are not authorizing the connections with the proper role. Are you using TACACS+ or RADIUS? Have you checked these posts? https://community.cisco.com/t5/network-access-control/aaa-tacacs-with-brocade-switches/m-p/2110595/highlight/tru...

JPavonM · 08-05-2024

Check the expiration date of your RADIUS server certificate been presented to the clients. If it's a MS NPS one, the certificate is selected per-policy in the Constraints Tab, under PEAP or Smarcard selection. If it's Cisco ISE, then look into Admini...

JPavonM · 08-05-2024

Yes you can, connecting to Entra is supported with your license level.

JPavonM · 08-05-2024

@MHM Cisco World unfortunately this is not what I'm looking for, so we should wait for Cisco t oadd a suppression feature on TACACS+ protocol the same way RADIUS has it. Thanks for the tips.

Member Since	‎11-28-2010 03:05 AM
Date Last Visited	‎06-24-2024 10:46 PM
Posts	1,017
Total Helpful Votes Received	2018

User Statistics

User Activity

How to ISE silent drop an authentication

Cisco ISE License consumption question

Is it possible to assign a policy to a specific PSN node group?

Cisco ISE for Device Admin with MFA (NPS proxy) and push notifications

C9800 Admin access through GUI with MFA

Re: 802.1X connection problem between Windows 11 and ISE

Re: Cisco ise integrate with brocade switch

Re: Users are unable to authenticate from Radius server - cisco 9800 W

Re: Cisco ISE required licenses to use EntraID

Re: How to ISE silent drop an authentication