About Andre Neethling

Andre Neethling · 07-08-2015

Hi. I am stumped here and have been troubleshooting for 2 days now. We recently updated to ISE 1.4.0.253. Since the update, neither ISE is responding to radius requests. When both nodes are registered, only 1 of them is returning data on the dashboar...

Andre Neethling · 05-13-2015

Hi All. I am experiencing an issue with CWA redirection not working. But when I enter the address of the Guest portal, I can successfully authenticate. However, no CoA is happening to activate the post auth Authorization Policy. I have attached some ...

Andre Neethling · 04-27-2014

Hi. I have an 1841 set up as a PPPoE dialer doing NAT and ZBF. I am experiencing some issues. My one PC works perfectly. All websites available. When I use my Mobile via the WiFi, only certain sites work. My other PC Can access some websites too. Goo...

Andre Neethling · 08-30-2013

HI. I am experiencing an issue with a LAB deployment of CISCO ISE. I cannot get the NTP to sync and the DB services to start. See output below. Any help will be appreciatediselab/admin# sh ntpConfigured NTP Servers:172.16.0.101synchronised to local n...

Andre Neethling · 11-15-2016

Maybe you can add the ISE Sub CA and Root CA certs to the trusted certs of the mobiles. But I suspect this is not a viable option due to the fact that the mobiles are not under your control.

Andre Neethling · 11-15-2016

The ISE CA is not trusted by any mobiles. The ISE generates a ROOT CA cert and then it issues a cert to the ISE Sub/Intermediate CA. This is the CA that issues certs for BYOD. The truted cert you bought is for the ISE system identification.

Andre Neethling · 11-15-2016

Is this with all BYOD devices? From 1.3, ISE has an integrated CA for BYOD. This CA's Root Certificate is self signed. This is most probably the cert you are not trusting.

Andre Neethling · 05-18-2016

No Probs........... I'm glad you got it to work.

Andre Neethling · 05-06-2016

Hi. The Outlook client (Outlook anywhere/RPC over HTTPS) doesn't behave well with decryption. What I would try to do is put the Exchange URL in a "Do not Decrypt" custom URL category and configure a decryption policy with the action "Pass" so that no...

Member Since	‎08-30-2013 12:33 AM
Date Last Visited	‎08-18-2017 06:45 PM
Posts	342
Total Helpful Votes Received	169

User Statistics

User Activity

ISE issuse after 1.4 update

ISE 1.3 CWA redirect and CoA issue

1841 NAT issue?

NTP reverts to local 127.127.1.0 (VMware)

Maybe you can add the ISE Sub

The ISE CA is not trusted by

Is this with all BYOD devices

No Probs........... I'm glad

Hi. The Outlook client