Network Access Control

Hi all, I read the following URL, posted by Greg:https://community.cisco.com/t5/security-knowledge-base/cisco-ise-with-microsoft-active-directory-azure-ad-and-intune/ta-p/4763635Great document with lots of detailed information! I have an additional q...

Hi Guys   I have two customers. Customer A, Use ISE with EAP-TLS Customer B, Use NPS Azure   The clients from customer B now needs to authenticate in the network of customer A also with EAP-TLS. But the clients don't trust the certificat of the ISE f...

Anyone know when Cisco ISE will start supporting TLSv1.3?  I am running ISE 3.2 patch-3 and it seems like TLSv1.2 is the highest it can go:nmap --script ssl-enum-ciphers -p 443 isenode1.cisco.comStarting Nmap 7.80 ( https://nmap.org ) at 2023-10-13 1...

Hi all,I've managed to get one PC up and running using dot1x and it's all authenticating correctly. However when I try another PC it just fails.What can I do to troubleshoot this? I've confirmed that the PC's have the same certificates and are in the...

Hello,I created a csr for an expired EAP Authentication cert on my ISE box and received a new cert from my local CA server.  When I try to gind the new cert to the csr I created, I receive a "Certificate/Private Key validation failed" message.  Probl...

Dears,we need help with rehosting policies from ISE 2.0 to ISE 2.6.The problem is that on 2.0 version disk usage already 95% so we can't take 'configuration backup'. The only backup we can get is 'operational backup' and it is in xml format. BUT as I...

Hello,have radius in windows server. I configured radius login in Cisco 2960X. Login works fine with radius account but I can't login with local account.Can anybody help me with this please? Want to have working radius and local login.Thank you very ...

Hi all,Does anyone have experience with this weird issue?Some of my PCs that connected to Avaya IP phone keep generating their MAC addresses and sending authentication packets to ISE every second.Generated MAC address only appear on show authenticati...

I'm speaking of Essentials/Advantage/Premier. We use on-prem SSM.is there way to know how many licenses Cisco ISE gets from the binding to a virtual account on Cisco SSM?The only piece of information is the consumed ones, like knowing how many you ar...

Hello Guys, I need help to validate whether my understanding is correct.I'm new to ISE, I know some rules but I can't progress with my client's problem.1 - He has an AD, but there is no GPO policy for Wireless.2 - There is a rule in ISe that first va...

Hi guys,I have a bit of an issues. I've got two routers on my bench that I building models for a FlexVPN deployment a couple of customers. Some customer are still running 2900 and others running 4000; we are in the process to replace these older mach...

Dears please help me .. have you face following error cisco ISE environment , my few windows pcs  are which are upgraded recently not able to connect to the network because of Dot1x auth issue . the error is as below 5713532: Apr 28 06:46:55.964: %DO...

Hello Everyone, I am contacting you all because i don't seem to find the needed information to resolve my issues, even though there are many similar topic as mine with the same error.We have an infrastructure using FTD ASA5506 with switch CISCO WS-C2...