About Jimi

Jimi · 09-13-2018

Hi All, May I have a confirmation if Temporal agent on ISE supports windows hotfix check? It says below that web agent for windows supports but temporal agent for windows doesn't; However, isn't temporal agent the same as the web agent for windows...

Jimi · 11-06-2017

Hi All,We’re currently in a conversation with an Aruba ClearPass customer who would like to leverage on their existing CP’s 802.1x authentications for our ISE-PIC/FMC identity NGFW solution.We’d like to know if the custom pre-defined ClearPass syslog...

Jimi · 09-27-2017

Hi all,Customer has security audit requirements and their audit team is asking my customer to prove that all these services with vulnerabilities to be shut down.Understand that we can turn off TLS 1.0 and 1.1 on ISE 2.2P2 but we're still unsure how d...

Jimi · 09-06-2017

Hi All,May I confirm that currently the supported use-case for 3rd party VPN concentrator are only for AAA services if they are able to support these radius attributes:AAA Attributes for Third-Party VPN Concentrators For VPN concentrators to integrat...

Jimi · 09-03-2017

Hi All,I'll just like to confirm that my understanding of how encryption is currently done for TACACS+ users in ISE 2.2 Internal Identity Store:With reference to this link: http://pmbuwiki.cisco.com/Products/ISE/Technical/Security#How_is_information_...

Jimi · 09-13-2018

Hi Jason, Thank you so much again for the prompt reply. May I also confirm if there's a procedure to check/ensure the windows endpoint is always up-to-date in regards to the patches and not just file checks on individual hotfixes?

Jimi · 09-13-2018

Hi Jason, Thank you for the prompt response. Perhaps I should rephrase my question. As of ISE2.1, can we confirm that the web agent supports windows hotfix checks? It’s stated as yes in the 2.1 documentation: https://www.cisco.com/c/en/us/td/docs/...

Jimi · 09-28-2017

Thanks a lot Hslai, would there be any documentation that we could show to user's compliance audit team to convince them that ISE is not impacted by SSHv2 vulnerabilities sine we only accept connections from SSH v2 clients. Would be good if there's a...

Jimi · 09-28-2017

Hi Charles,Actually that is the exact documentation that the customer is referring to as a hardening guide. They are upset that it's the advise of that specific documentation to follow the Prime Infra Admin guide, which in turn advise for turning off...

Jimi · 09-27-2017

Understood. Thank you

Member Since	‎02-12-2017 10:20 PM
Date Last Visited	‎01-18-2019 03:41 AM
Posts	16
Total Helpful Votes Received	8

User Statistics

User Activity

Temporal Agent Check for Windows Hotfix/Patches

ISE-PIC Syslog pre-defined parser for ClearPass

ISE hardening recommendations - Turning off services such as TLS1.0, 1.1 and SSH v1

Support for 3rd party VPN concentrator with ISE 2.2

Encryption for TACACS+ user passwords inside ISE2.2's Internal Identity Store

Re: Temporal Agent Check for Windows Hotfix/Patches

Re: Temporal Agent Check for Windows Hotfix/Patches

Re: ISE hardening recommendations - Turning off services such as TLS1.0, 1.1 and SSH v1

Re: ISE hardening recommendations - Turning off services such as TLS1.0, 1.1 and SSH v1

Re: Support for 3rd party VPN concentrator with ISE 2.2