About katmcnam

Quick ISE XML Profile Creator · 10-31-2019

I am hoping the attached spreadsheet can help folks create their own simple custom profiles in bulk. For anyone who has to create dozens of profiles at once, it can get pretty time consuming doing it through the GUI. Shout out to Craig Hyps who creat...

Custom ISE Profiles · 10-25-2019

As part of my job, I often find myself configuring custom profiles for customers based on the attributes they have collected from their live deployments and what probes they have turned on. I've also worked on optimizing existing profiles that are ...

katmcnam · 11-10-2018

I took some time to import and update quite a bit of RADIUS vendor dictionaries for 3rd party vendors into ISE. I grabbed this information from various community and open source sites but I obviously can't test it against every vendor out there since...

katmcnam · 05-31-2018

This blog post is going to be going over integration ISE 2.1 and Stealthwatch via pxGrid with self-signed certificates. I personally like using CA-Signed certificates for my deployment because if I ever need to rebuild an ISE instance or pxGrid clien...

katmcnam · 08-09-2016

In this post, I'm going to walk through the BYOD policy configuration. This policy will be pushing certificate to my users via the SCEP profile we previously created inside ISE. I'll walk through some of the different options you can configure in thi...

katmcnam · 10-27-2017

Oh I meant profiling when the endpoint hits the CPP since that's technically an ISE portal when they initially connect

katmcnam · 10-27-2017

Are you doing posturing at all? If you're doing CPP, I would assume ISE could get the user-agent from that as well (Tim and co will correct me if I'm wrong)

katmcnam · 10-13-2017

He actually did reply with something useful. He checked the RFC and replied to you as such. Marvin Rhoads is pretty respected in the community with 13,000 posts over 16+ years. In my experience, he seldom replies without thinking it through first. ...

katmcnam · 07-27-2017

Like Hslai said, easier to ask in discussions. I'm usually traveling around or doing my normal day job so I don't always find the time to reply on here but if you ask in discussions, one of many folks would be able to answer and if someone else has t...

katmcnam · 04-19-2017

@Nikhil - On my site, I use ip http active-session-modules none. I have a video of me configuring it here and the sample config: 1.5 - Switch Configuration — Networking funAs far as authorized vs reinitialized, it depends on what you're trying to acc...

Member Since	‎07-01-2014 12:53 PM
Date Last Visited	‎09-21-2023 02:12 PM
Posts	58
Total Helpful Votes Received	297

User Statistics

User Activity

Quick ISE XML Profile Creator

Custom ISE Profiles

For download: RADIUS Vendor Dictionaries for 3rd Parties

ISE 2.1 and StealthWatch Integration via Self-Sign Certs

ISE - BYOD Policy

Re: ISE 2.3, C3PL, and DHCP profiling

Re: ISE 2.3, C3PL, and DHCP profiling

Re: Firepower 6.2.0 / ASDM Syslog timestamp question

Re: ISE - Adding Certificates to ISE and Creating Certificate Profiles

Re: ISE - Switch Configuration