About ruhearn

ruhearn · 07-09-2019

Hello, When performing a migration from ACS to ISE, does the password expiry value (x days until expiration) come over from ACS or do these values for internal users (and internal admin users?) come over as well or does the timer/counter reset and...

ruhearn · 05-22-2019

Hello, I was reviewing the IBNS 2.0 guide: https://community.cisco.com/t5/security-documents/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515 which states: The device-tracking policy is effective only when applying the policy...

ruhearn · 09-20-2018

Hello, My customer is running ASA on an FP4140 Appliance and is using ISE for posture assessment. Is there anywhere that has comments on ISE DACL scalability for AnyConnect VPN users? Is this like a switch where there is a limited amount of resourc...

ruhearn · 07-31-2018

Hello, We are working on a long-running ISE pilot for a customer using 2.3. Of course, in the customer environment the ISE node cannot access the internet. I tried to look for the temporal agent in the offline policy feed service update but that’s ...

ruhearn · 05-02-2018

Hello,I presume that AnyConnect's MSI removes old versions. Is there any limitation to this as long as the computer/user/etc. has the right permissions for allow changes at this level?Thanks,Russ

ruhearn · 04-16-2019

Hey @Nidhi - I understand that 2.6 + AC 4.7 supports sending the UDID via the posture flow, but is this would only cover customers using ISE posture. In the past, Jamf would get the MAC addresses of whatever NICs (I believe up to two of them) whe...

ruhearn · 10-18-2018

Hey Hsing, I have a customer who has contacted me about this, as well (will forward internally) but wanted to see if there was any update if this frustrating issue would be fixed? Thank you, Russ

Re: Limiting user login access · 08-02-2018

Is this known to work with certificates as the external user database? Is there anything planned to make this work across multiple PSNs using the MnT or some other solution?Thanks!

ruhearn · 07-31-2018

Hello, we are doing a test case without AnyConnect - using the temporal/dissolvable agent. We have completed the testing with AnyConnect.

ruhearn · 07-25-2017

Hey Charles,Thank you for the thorough reply, I suppose the bit I did miss out on here is that the clients, like many in an enterprise environment, do not have much if any access to run installers that are downloaded. Cheers,Russ

Member Since	‎03-14-2011 11:49 AM
Date Last Visited	‎08-05-2020 12:02 AM
Posts	14
Total Helpful Votes Received	1

User Statistics

User Activity

Internal User Password expiry during migration of ACS 5.8p9 --> ISE

Tying device-tracking policy to a source template?

Firepower ASA VPN DACL?

How to get temporal agent on offline ISE node?

Does installer remove old versions?

Re: ISE/JAMF MDM Attributes

Re: ISE 2.2 and 2.3 and vCenter 6.5 - .ova still not working!!!

Re: Limiting user login access

Re: How to get temporal agent on offline ISE node?

Re: Posture: Download AND Execute a program?