About JPavonM

JPavonM · 10-14-2024

Hi colleagues, This question is part of a M&A integration were their Identity Store for authentication and authorization is Entra ID, but we don't have Advanced licenses to connect with InTune so need a manual workaround to deny machines with revoked...

JPavonM · 08-02-2024

Hi chaps, Anybody knows how to silently drop unwanted authentication tries in the Default policy to avoid Rapid7 scanning for default usernames not appearing in the Logs? I0m runinng ISE 3.3Patch2 and my device admin authentication policies (TACACS+)...

JPavonM · 07-24-2024

I've found multiple answers to license consumptions in Cisco ISE, but it is not clear when an Essential license is accounted- (https://community.cisco.com/t5/network-access-control/ise-license-consumption/m-p/4283900/highlight/true#M565163 from @Marc...

JPavonM · 07-11-2024

I canot find the answer to this question on ISE Admin guide, and it seems to me that Node Group only functionality is to detect a failure between PSN nodes that belong to a specific group so to keep the sessions active. (I may be wrong) Is it possibl...

JPavonM · 06-10-2024

Hi colleagues, Does anybody knows if there is a way to use push notification and not OTC when using Ciso ISE and MS NPS with EntraID extension to perform the 2FA authentication for device admin? I can't make it to use that option and I always receive...

JPavonM · 10-28-2024

You can control this by setting it under an authorization policy into ISE, and set the rate per-ad-group. Apart from this, I'm not friend of rate limiting the wiireless as it may impact all users.

JPavonM · 10-28-2024

- Check how it looks like by setting your production SSID to only broadcast in one band (I have seen some devices continuosly roaming between bands during negotiation)- Disable vendor features like band select or load balance in the WLAN settings.- I...

JPavonM · 10-15-2024

But how can I import the Open API schemas to be used in Postman?https://<ise>/api/swagger-ui/index.html

JPavonM · 10-14-2024

All of this works for Windows but not MacOS, as the new certificate must be inside the wirless profile, and that may trigger a pop up window requesting explicit Trust from the end user.

JPavonM · 10-14-2024

Thanks for that, I was only looking into ERS APIs

Member Since	‎11-28-2010 03:05 AM
Date Last Visited	‎09-17-2024 02:33 AM
Posts	1,059
Total Helpful Votes Received	2051

User Statistics

User Activity

ISE 3.3 change custom name Policy Element via API

How to ISE silent drop an authentication

Cisco ISE License consumption question

Is it possible to assign a policy to a specific PSN node group?

Cisco ISE for Device Admin with MFA (NPS proxy) and push notifications

Re: Allocate Data Volume Per SSID or Per User Group

Re: Wireless Connection issues

Re: ISE 3.3 change custom name Policy Element via API

Re: EAP Authentication certificate expiry in CISCO ISE

Re: ISE 3.3 change custom name Policy Element via API