Network Access Control

Resolved! ISE - SYNC Process

Hello, Added one new machine to the actual Primary and Secondary deployment with only the PSN active role. The SYNC is in progress.But is already in SYNC for about 3h, and does not pass from there. Is there a way i can check what is doing from the CL...

Ise Intune Integration Win10 support

Hello, Currently I'm facing a challenge where we would like to implement the Cisco ISE Intune integration to connect clients with iOS/Android & Windows 10. Windows 10 is only managed via Intune and connected to Azure AD. Now technically this works wi...

Stack Member Reload when Applying IBNS 2.0

Does anyone know a bug on stackable switches that explains a stack member reload when applying IBNS 2.0 template. I have seen it over the past year and a half on 3850s, but saw it tonight on 9300s. IOS versions are all over the board. Our template...

GUI error ISE 2.6 patch 7.

I'm not sure when this started, but gat the attached error when trying to access ISE with chrome. I think it's a chrome issue as I can open it in firefox, but am at a loss of how to correct the issue. I've reset chrome and have it updated to current ...

Resolved! Certificate imports fails via CLI

Hi Experts,Setup: ISE 2.6.0.156I was able to restore the configuration and operational backup on second ISE standalone instance.The certificate backup was done by exporting the certificates using CLI.Now when I am trying to import the certificates of...

Resolved! Cisco ISE Posture: Failed to Perfom the required client update checks. Contact your System Administrator.

Hello All, We are running ISE version 2.3 with patch 3. We have installed the following Anyconnect and Compliance Modules: anyconnect-win-4.5.03040-core-vpn-predeploy-k9 anyconnect-win-4.5.03040-iseposture-predeploy-k9 anyconnect-win-3.6.11682.2-is...

ISE Passive ID using Microsoft Member Server Failing

Hi,Has anyone been able to get ISE Passive ID working using the passive ID agent on a Member Server joined to the domain through a Domain Controller working? The agent appears on the Member server and communications between it and ISE are seen on por...

Active Endpoints Total is Way Off or Not Resetting

Hello All,ISE v2.7We recently upgrade our ISE deployment from 2.3 to 2.7 about 2 weeks ago.Since the upgrade, on the ISE Home page, the Active Endpoints section is currently showing 2,558. This number is very inaccurate. Our normal number for active ...

Extending CoA capabilities for 3rd party NADs during Central Web Auth

Hi all,I wanted to ask, if ISE will utilize further CoA capabilites for 3rd party vendors, provided the network device profile is configured with those additional settings? Duplicating a profile opens up the configuration of other CoA messages. I am ...

Resolved! Endpoint purge policy for 'blank' Identity Group

Dear expertsI am seeing an increasing count of Endpoints and I am unable to create a Purge Policy to delete them. ISE 2.2 patch 2 - only base license installed (no Plus or Apex).The reason is that this massive amount of Endpoints is in an <undefined>...

Posture Assesment cisco ise 2.7

Hello, Can someone please help me how to do the following posture checks in cisco ise. Symantec Antivirus Updates not less than 14 daysWindows 10 updates not less than 30 daysFor laptops Bit locker encryption MUST be enabled for desktops it is not MA...

Resolved! ISE Posture File Conditions - regular expressions

Hi everyone, I would like to ask if it is possible in ISE Posture File Condition to create a condition verifying the existence of any file with a given extension. E.g C:\Windows\Minidump\*.dmp When I try to use the "*" character, I get a message that...

ISE 2.7 patch 2 are using PXgrid version 2.????

Does anyone know which exact PXgrid version (2.xxxx) ISE 2.7 patch 2 are using ?I need the exact version of PXgrid version 2.xxx. I know its version 2.Paloalto's Panorama plugin for Pxgrid do not work on 2.7, but is ok on 2.6 patch 8.we need to know ...

Resolved! ็How can configure ISE for FIX 2 IP for 1 Users

Hi All ,I try to configure Cisco ISE Static IP for User VPN(User Custom Attributes) . It's working fine . But If I need to configure fix 2 IP Address for 1 User .I'm not sure how can do it for this situation and condition on Cisco ISE. Please advis...

Trustsec questions

Hi alliI have a few questions around trustsec. 1.I believe the packets are tagged on ingress, what happens if the switch the client is connected to does not do online tagging ? Does it tag on the first switch that supports it? 2.what is sxp used for ...

Network Access Control

Forum Posts

Resolved! ISE - SYNC Process

Ise Intune Integration Win10 support

Stack Member Reload when Applying IBNS 2.0

GUI error ISE 2.6 patch 7.

Resolved! Certificate imports fails via CLI

Resolved! Cisco ISE Posture: Failed to Perfom the required client update checks. Contact your System Administrator.

ISE Passive ID using Microsoft Member Server Failing

Active Endpoints Total is Way Off or Not Resetting

Extending CoA capabilities for 3rd party NADs during Central Web Auth

Resolved! Endpoint purge policy for 'blank' Identity Group

Posture Assesment cisco ise 2.7

Resolved! ISE Posture File Conditions - regular expressions

ISE 2.7 patch 2 are using PXgrid version 2.????

Resolved! ็How can configure ISE for FIX 2 IP for 1 Users

Trustsec questions

Creating Custom Attribute for Dynamic Reauthorization Scheduler

ISE Sponsor Portal - Change Default Country Number and SMS Provider

Windows 11 EAP-TEAP "Action Needed" to Sign in

NetFlow Probe Profiling – Missing IP and Port in ISE Context Visibili

Default Route SGT

Corrupted dACLs received from ISE

Suppressing Specific authpriv Log Messages on NXOS

AAA New-Style to Legacy Mode

Cisco Nexus Dashboard Tacacs Configuration with Cisco ISE

Cisco ISE question