Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Is there any way, or has anyone had any luck coming up with a working solution with the current verison of FTD for dynamic access policies on VPN Anyconnect clients using FTD firewalls? Can you use a DACL with ISE or a Radius server? Can you use LDAP...
Hello - I will probably be opening a TAC Case on this but thought id ask here first in case someone can explain...We have an ISE 2.4 (unpatched) Server used for guest wireless, with Sponsor Approval required. We used the orginal 3 Sponsor groups f...
Is it possible to install a self-signed certificate from an ISE PSN Node to a client PC running Anyconnect so things like VPN, NAM, and most importantly ISE Posture Assessment module will trust it without clicking 'Connect Anyway'. ? I have tried to...
I have a client with ASA multicontext firewall running with Firepower 6.1 in it. They have limited bandwidth for Firepower on it with multiple 10 gig lines so they are restricting which traffic gets redirected to Sourcefire Module for fiiltering. Th...
We have a working ISE deployment with AD Integration. Authentication works correctly, however the AD!- ExternalGroups-EQUALS-XXXXXX Is not matching on the policies in the TACACS policies. It was a migrated configuration which worked correctly in ACS...
I did run the check SIDs and those all either updated or were ok. I didnt write down the response from the server when I clicked it. However even after doing so the problem was there. I ran the current migration utility from ACS 5.6 to ISE 2.2 to...
I manually deleted all the AD Groups that were migrated from the ACS and manually re-added them. I went through each policy and reassigned the groups in the rules with AD groups in them. Each time saving in between. Afterwards things started working....
Ill re-check this but yes. I ire-mported manually all the groups from AD as part of troubleshooting. I will do a few test case rules before I open a TAC case just thought id ask here in case it was a known issue. Thanks!
