About Greg Gibbs

Greg Gibbs · 01-27-2023

Introduction With many customers moving to a cloud-first strategy, it is important to understand the differences between traditional Active Directory and Azure AD and the caveats and limitations with how Cisco ISE integrates and/or interacts with th...

Greg Gibbs · 05-11-2021

Introduction With the enhancements in ISE 3.0 for integrating with Azure AD via SAML IdP, it is now possible to leverage Microsoft Single Sign-On for multiple ISE Portals (for example Sponsor and Guest/BYOD Portals). At the time of this writing, ISE...

Greg Gibbs · 05-10-2021

IntroductionPrerequisitesConfigurationVerify the configuration Introduction With the enhancements in ISE 3.0 for integrating with Azure AD via SAML IdP, it is now possible to create a BYOD Flow to provide Wireless network access using an employee’s ...

Greg Gibbs · 08-04-2020

I recently worked with a customer that is deploying Juniper EX switches with their existing ISE 2.6 cluster for NAC. We found that the currently available Network Device Profile for Juniper EX switches did not provide the ability to perform CoA actio...

Greg Gibbs · 07-09-2020

I'm working on a PoC design that includes ISE (version 2.7) and APIC-DC (version 4.2) Policy Plane integration for TrustSec. Per the ACI Settings page in ISE, ACI version 3.2 and above uses the Kafka method for integration but the only documentation ...

Greg Gibbs · 06-01-2023

I don't believe there is a theoretical maximum for the number of MAC addresses that can be stored in the endpoint database, but the maximum validated is 2 million. With your 2 node cluster, the number you would need to be concerned about would be the...

Greg Gibbs · 06-01-2023

I'm not sure I understand the issue, so you might need to provide more specifics (a diagram might also help). ISE does query the GC for some information and the DC that the ISE nodes use primarily is controlled by how the Active Directory Sites & Ser...

Greg Gibbs · 05-31-2023

Yes, the VM Common license is required for each individual ISE VM you are deploying. With 3.x you will need 1 endpoint license per endpoint. In your example, the endpoint would consume one Premier license due to the use of the Posture feature. More d...

Greg Gibbs · 05-31-2023

I haven't tested it, but it should be possible since the Posture flow is triggered by the Authorization Policy. The ASA would perform the Authentication then send the request for Authorization to ISE. I'm not aware of a single document with the full ...

Greg Gibbs · 05-30-2023

Downloadable ACLs are not the same thing as Dynamic ACLs (also known as "Lock-and-Key" ACLs). These serve completely different functions. See the following document for an example of Dynamic ACLs.https://www.cisco.com/c/en/us/support/docs/security-vp...

Member Since	‎01-17-2011 02:32 PM
Date Last Visited	‎05-25-2023 01:45 AM
Posts	1,151
Total Helpful Votes Received	3423

User Statistics

User Activity

Cisco ISE with Microsoft Active Directory, Azure AD, and Intune

Azure AD SSO with multiple ISE Portals

ISE BYOD Flow Using Azure AD

Juniper EX Network Device Profile with CoA

TrustSec-ACI Policy Plane integration using Kafka method

Re: How many maximum mac address can create in endpoint identity ?

Re: ISE: Using AD Join Point w/ Global Catalog Server

Re: Cisco ISE VM deployment Licenses

Re: Cisco ISE Clientless Posture with VPN users

Re: Cisco ISE 3.2 Secure Wired Access with Catalyst 1000 Series Switch