Network Access Control

Customer currently got  ISE v1.4, they plan to upgrade probably to latest 2.3. They have 6000 traditional endpoint base licenses. How do we migrate these to be available via smart? Is this one just a PAK migration?·         What is the “correct” proc...

Hello, I am trying to configure an ISE-PIC. I already have the DC configured, joined, and WMI configured successfully according to the message shown on the ISE-PIC, but I don't see any live session at all. I configured an FMC as a Provider and I veri...

Hello,I am implementing an 802.1x environment using Cisco NAM for user+machine auth. I am using "Connect before Logon". When I put in my credentials and press enter I can immediately see the connection attempt in the ISE RADIUS logs, but it is only p...

Hello all, Currently I am running a standalone deployment of an ISE 2.0.1.I want to deploy an ISE 2.0 in an distributed environment, and have some questions regarding licensing:- I want to deploy every node as VM, do I need a VM license for each node...

Ran into a scenario where users are being prompted in Microsoft to select certificate for authentication (user/workstation). How can this behavior be prevented from happening? Tried implementing authz policies matching group membership (user/computer...

Hello all,Is there a good guide that you can recommend for the configuration of both FMC and ISE to be able to perform passive authentication in Firesight using ISE as the identity source instead of using the AD agent?Thanks

Hi Experts,A customer is considering to delpoy BYOD with ISE and machine certificate authentication for IoT devices, since the coporate endpoints have already installed coporate CA signed certificate, but IoT endpoints have no certificate yet. Custom...

Hi,   Is there any command to check the HA status in cisco ISE using CLI. I want to know whether the particular node is acting as primary or secondary using cli?   Thanks and Regards, Naveen

Hi All,I am connecting interfaces Gi0 and Gi1 to different switches and configure Bond interface-0. I hope Bond-0 will act as management as well as runtime interface.Can someone confirm, in case of primary interface(Gi0) failure, will bond interface ...

Hi,In WLC 8.6, we started supporting volume metering by allowing radius accounting interim interval to be set at a granular 60 seconds level.config wlan radius_server acct interim-update intervalWith this said, is there a way to setup ISE to disconn...