Hi,Are there recommended user and device certificate templates, the ones used in Windows CA for example. I have seen diffrent ways of doing it - diffrent values for SAN field for example. The reason I ask is that I am wondering how the device group m...
Hi,I assume that with smart licencing, we can "share" all licences (base, plus apex) between diffrent ISE clusters (PANs), including those in diffrent geographic regions? Thanks,Rafal
Hi,We're implementing ISE posture with AnyConnect VPN. In the uknown state dACL we had to allow quite a few ports to our domain controllers to get Microsoft NLA (network location awareness) to work, which makes it a bit less secure. Still very secur...
Hello!Will AnyConnect ISE posture work with SBL, i.e will posture check work before the user has logged on? If not, what alternatives would be available?
When the interface comes up, the CAM puts the user in the AUTH vlan as expected via the set command (vlan 210)03:09:09: SNMP: Packet received via UDP from 172.31.200.200 on Vlan22003:09:09: SNMP: Set request, reqid 2144479366, errstat 0, erridx 0 vmV...
Hi Craig,How about the device certificate? what should I put in the subject name and what should I match for in the certificate profile? and finally how will the hostname be "extracted" so that a search in the AD can be done? Thanks,Rafal
