Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi Guys, I am deploying a new network and I am implementing posture assessment over wired, wireless and VPN.I would like to achieve this: when a user is compliance, the user can connect to any other corp network without performing another posture sca...
Hi Guys, We are planning to deploy two ISE servers with sponsor portal and BYOD.My question is how the sponsor portal and mydevices portal should work.Can this configuration be achieved without using any load balancer for DNS? Also how should I confi...
Hi Guys,
I have an issue with a lab where I've configured always-on and I have issue to connect to any guest network with landing page.
I've enabled captive portal remediation and this works fine without proxy configuration on laptop, but with prox...
Hello,
I'm configuring ISE to perform posture over wired and VPN. Over wired the redirect is working (even if the browser doesn't load the page), but on VPN I'm not redirected to ISE. The client is still able to find the policy servers using the co...
Hi Guys,
Hope you can help me with my issue.
I'm trying to authenticate via ISE an IP phone (not Cisco) and laptop connected to the phone.
The phone is authenticated using mab and the laptop using 802.1x
My concerne is that phone and laptop are o...
Hi Colby,The order configured is the following: compliant, not compliant and unknown.My laptop hits the unknown rule even if the compliant rule is at the top.Not sure if this can be an issue but I have multiple policy sets, one for VPN one for wired ...
sorry but I still don't get how this should work. I have my sponsorportal pointing to one PSN. If this PSN goes down, what is the best way to change the DNS resolution?Using a load balancer for DNS?
Hi Marius,
I cannot configure with open mode and we can only use closed mode.
Everything else is working fine. it's just the integration with the proxy server.
Regards,
Albert