Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Ben.Levin
08-18-2017
Stats
Member since
09-26-2002
93
Posts
0
Helpful
0
Solutions
Created by
Ben.Levin
in Policy and Access
in Policy and Access
02-06-2017
08:37 AM
02-06-2017
08:37 AM
We are using ISE authentication and posture assessment for VPN and wireless and need to figure out a way to have the drive mappings script run after posture assessment is complete and successful. I know AnyConnect can run scripts but has anyone done this before and is there any documentation on the process? I've read the AnyConnect administration guides but it's not clear what type of scripts can be run and whether the ISE posture module can run the script when it reaches the compliant state. Thanks.
... View more
Labels:
Created by
Ben.Levin
in Policy and Access
in Policy and Access
09-28-2016
06:43 AM
09-28-2016
06:43 AM
We are running ISE 2.0 patch 1 and in the past day we've seen a couple of iOS devices being misidentified as OS_X-Workstation instead of Apple-iPhone or Apple-iPad. This causes the devices to go through posture assessment, which doesn't work and limits network access. We suspect this has to do with the iOS 10.0.2 upgrade but haven't confirmed that yet. A TAC case has been opened but I was wondering if anyone else has seen this.
Thanks.
... View more
Labels:
08-16-2016
11:34 AM
We're in the middle of the lab upgrade from 2.0 to 2.1, using the GUI upgrade method. It seems better than using the CLI so far. However, my lab deployment only has 2 servers and production has 8, so I'm really not looking forward to how long that is going to take. I'm planning to open a TAC case to make sure we have the procedure down and try to get a better idea of how long it will take to finish all 8 servers. When we upgraded from 1.3 to 2.0, it took us 13 hours.
... View more
Created by
Ben.Levin
in Policy and Access
in Policy and Access
08-02-2016
07:00 AM
08-02-2016
07:00 AM
We are using AnyConnect 4 ISE posture to check a couple of Windows services. However, we have noticed that sometimes when a computer boots up from scratch and connects to the network, sometimes ISE posture will run before those services have started up and so it reports that the computer is non compliant. Has anyone run into this before and are there any ways to mitigate this?
Thanks.
... View more
Labels:
06-16-2016
11:37 AM
One more question. Does this work for ISE 2.0? When I enter the javascript code, the preview still shows the "don't have an account" link at the bottom and then under that "$('#ui_login_self_reg_button').insertAfter('#ui_l" appears.
... View more
06-16-2016
11:22 AM
Hi Jason,
When you change the admin access portal customization to HTML and javascript, is there any impact to the system? Do any ISE services need to reboot?
Thanks.
Ben
... View more
05-06-2016
07:17 AM
Any idea how ISE posture is trying to initiate the AV update process? We are logging in as a regular admin user. However, I am going to try logging in as an admin user to see if it makes any difference. Thanks!
... View more
05-06-2016
07:14 AM
I'm logged in as a regular user and I believe we're using LiveUpdate.
... View more
Created by
Ben.Levin
in Policy and Access
in Policy and Access
05-04-2016
08:51 AM
05-04-2016
08:51 AM
Before I open a TAC case on this issue, I figured I'd ask here in case anyone has seen this before. I'm running ISE 2.0 patch 2 with AnyConnect 4.1/ISE Posture on our Windows clients. If a client has out of date antivirus definitions (SEP 12.1.6), ISE posture reports this but if I click the start button to update the definitions, AnyConnect/ISE Posture comes back with an error saying that the AV/AS update has failed. I'm thinking it's a Windows permissions issue but I'm not sure how I would solve this.
Has anyone seen this before?
Thanks.
... View more
Labels:
Created by
Ben.Levin
in Policy and Access
in Policy and Access
03-17-2016
11:36 AM
03-17-2016
11:36 AM
I'm getting ready to upgrade our 8 node ISE 1.3 deployment to 2.0. I've followed the upgrade documentation to prepare for this but I was wondering if anyone has experience doing the 2.0 upgrade on a similar setup. Do you have any experiences, issues, etc, you can share? I'm particularly interested in how long it took. We did set up a 2 node deployment in our lab but the upgrade was pretty quick, about 1 hour per server.
Thank you.
... View more
Labels:
02-03-2016
10:45 AM
Hi all,
We have two DMVPN hubs configure, one is an ASR 1002 and the other is a 3945. EIGRP is configured to use the ASR as the preferred path.
We have discovered that the spokes are seeing significantly lower upload speeds. One site has a 40 down/40 up Internet connection and a speed test to an internal server is showing close to 40mb down but only around 1mb upload. Has anyone run into this before? We have been working with the TAC and they have validated our DMVPN configs so now they want us to investigate issues along the network path.
If anyone can provide assistance, it would be much appreciated. Thanks.
Ben
... View more
Labels:
02-02-2016
11:49 AM
We just finished setting up ISE 2.0 in our lab and have the same requirement since we're getting ready to deploy ISE in production. We want to make sure clients have up to date patches before we give them full network access. However, the documentation doesn't say anything about how this process works. We really need to understand it before we can properly test. We're reaching out to our Cisco contacts to try to get more info.
... View more
Created by
Ben.Levin
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
11-12-2015
10:30 AM
11-12-2015
10:30 AM
We are starting a deployment of AnyConnect 4.1 with Network Access Manager. A few users are unable to access their home wireless network. I was looking at one machine and when they select the home network, it seems to get stuck at aquiring IP address. Other devices have no problem connecting to the wireless network. Has anyone seen this before? Thanks.
... View more
02-06-2017
We are using ISE authentication and posture assessment for VPN and
wireless and need to figure out a...
Created by
Ben.Levin
in Policy and Access
09-28-2016
09-28-2016
We are running ISE 2.0 patch 1 and in the past day we've seen a couple
of iOS devices being misident...
08-16-2016
We're in the middle of the lab upgrade from 2.0 to 2.1, using the GUI
upgrade method. It seems bette...
08-02-2016
We are using AnyConnect 4 ISE posture to check a couple of Windows
services. However, we have notice...
06-16-2016
One more question. Does this work for ISE 2.0? When I enter the
javascript code, the preview still s...
06-16-2016
Hi Jason, When you change the admin access portal customization to HTML
and javascript, is there any...
05-06-2016
Any idea how ISE posture is trying to initiate the AV update process? We
are logging in as a regular...
05-04-2016
Before I open a TAC case on this issue, I figured I'd ask here in case
anyone has seen this before. ...
Created by
Ben.Levin
in Policy and Access
03-17-2016
03-17-2016
I'm getting ready to upgrade our 8 node ISE 1.3 deployment to 2.0. I've
followed the upgrade documen...
02-03-2016
Hi all, We have two DMVPN hubs configure, one is an ASR 1002 and the
other is a 3945. EIGRP is confi...
02-02-2016
We just finished setting up ISE 2.0 in our lab and have the same
requirement since we're getting rea...
Created by
Ben.Levin
in Other Wireless - Mobility Subjects
11-12-2015
11-12-2015
We are starting a deployment of AnyConnect 4.1 with Network Access
Manager. A few users are unable t...
Public Statistics
| Date Registered | 09-26-2002 05:28 AM |
| Date Last Visited | 08-18-2017 03:51 AM |
| Total Messages Posted | 93 |
