I have a customer who's wanting to pull a report of all of his endpoints showing how long they've been inactive.  It looks like I can see that attribute individually when looking at an endpoint, but that's not a field available when you export the endpoints. ... View more

When users add their own devices via the my devices portal, the device always shows "pending" as a status.  While the device does operate properly, this is confusing to the users.  Is there a way to disable the pending status?  Hide it?   ... View more

We are looking for a way to pass multiple RADIUS attributes to an external ODBC (SQL) server for authentication / authorization.  As of right now, we are only able to send the username which greatly limits our ability to properly query the SQL database for proper authorization.  Currently the customer is doing this in Clearpass with the following string:   call clearpass_eap_attributes("%{Authentication:Username}", "%{Authentication:Full-Username}", "%{Connection:Client-Mac-Address}", "%{Connection:AP-Mac}", "%{Connection:AP-Name}", "%{Connection:SSID}", "%{Connection:NAD-IP-Address}");   The names wrapped inside of %{} are Aruba-isms, but here's a list of IETF radius attribute names and numbers that those equate to:   User-Name (1) NAS-IP-Address (4) Called-Station-Id (30) Calling-Station-Id (31) ... View more

We have a custom build of FreeRADIUS that does some unique username based hashing for VLAN assignment.  I'd like to be able to utilize ISE as the authentication and authorization server, but have it send the username to an external RADIUS server, then "consume" the VLAN ID sent from that external server and send it as a CoA to the NAD.  Is this possible? ... View more

I have a need to return custom error messages to a user when they fail to pass through a CWA portal.     For instance, a user signs in and passes authentication, but doesn't have the proper AD group membership. Want error message to state "you're missing XXXX access".       ... View more

I have a large higher-ed customer who was burned a few years back on WiSM2s running out of RADIUS sessions IDs during class change.  They eventually spread their wireless clients out across 22 WiSM2s before they finally felt comfortable enough with the load to move forward.  Fast-forward a few years and they’re consolidating down to 5-7 8540 WLCs and are concerned about the same issue occurring, only worse due to number of devices growing over the years.  Do we have any kind of guidelines on maximum number of clients / RADIUS sessions to expect on a WLC -> ISE PSN before we should introduce a stateful load balancer to begin distributing?  ... View more

I'm trying to work through a workflow where a user logs into ISE via GuestPortal on a capable machine (something with a web browser), logs in with their AD credentials, and self-registers their device (just MAB, no dot1x).  This part of the workflow is easy and complete.  The second part of the workflow would have them connecting directly to a link from that same workstation and registering multiple devices that don't have a web browser (printers, game consoles, lab devices, etc.) and I can't seem to find any documentation on how to expose the "MyDevices" portal. If someone could simply point me to some documentation on directly exposing MyDevices, I would greatly appreciate it. ... View more

I have a customer who is interested in tying ISE TACACS Accounting into their Service Now change management system.  I noticed they are a PXGrid Ecosystem partner, but there doesn't seem to be much information about ISE integration with Service Now readily available.  Is this something anyone has done via API / PXGrid that we could discuss? ... View more

What are the ramifications of changing the IP address of an admin / monitoring node in a distributed deployment?  ... View more

Other than converting the OVA into an OVF, are there any other special requirements to deploy the 200GB image (PSN image) onto a VMWare ESX6.5 cluster?  In trying to deploy we're running into either an "invalid character" problem or an eternal spinning wheel without any progress.  ... View more