Hi team,
we have project for both StealthWatch and ISE. Plan is to configure ISE 2.4 patch 9 to pull events through WMI from Windows Server 2016 to ISE and share it with Stealthwatch. We have problems with ISE collecting events from AD. We used Dom...
Dear all,
we have problem with getting sessions from PassiveID. Customer has ISE and DC agent installed onto Windows server 2016. Agent couldnt sync back to ISE. Red dot is indicating status in PassiveID dashboard and 0 sessions were received. Ther...
Hi team,
Customer has ISE with Base licenses and PassiveID on. Can customer share Session Table (user info) to StealthWatch if he has only Base licenses?
Regards,
Vedran.
Dear all,
we have customer with ISE 2.4 Patch 7. They are using:
1. 802.1x with Machine Certs
2. PassiveID
Session table in ISE displays UserName as AD username (got that from PassiveID). Problem is when we try to implement CoA switch doesn' re...
Hi, solved the problem with customer.
ISE collects kerberos events from Security Event logs. Customer didn't have Kerberos logging turned on, which is by default turned off in Windows. We enabled Audit Kerberos Authentication Service through Advanc...
Hi,
no I haven't. We switched to WMI and also have problems. Here is thread that I opened and currently looking into this>
https://community.cisco.com/t5/identity-services-engine-ise/ise-passiveid-and-wmi-pulling/m-p/3926423#M30425
Regrads,
Ved...