Network Access Control

Hi All,   With ACI Integration, we probably can manipulate SGTs to EPG mappings, but what are the other integrations that we can do? Information does not seem to be readily documented.   What are our validated/support use cases with ACI and ISE?   Ma...

When I export a list of the devices out of Context Visibility, some of them would have a different info/value/attribute than what I see in Operations / RADIIUS.For example, a device shows up as "connected" in Context Visibility is actually not online...

Hi all, I'm struggling to delete LDAP profile on Cisco ISE. I have tried to remove where the item is used.But I'm stuck with the error below and cannot find it yet."Referential Integrity error: This item is referred to by another object: NSF Dictiona...

Hi  I have a third party firewall, (Checkpoint) and i am trying to get my Security Groups to the firewall.  The Firewall can access the ISE, and i see all my Security Groups, but when accessing a SGT there are no IPS in it. is there easy way to make ...

Hello Gents, I am looking to have the AP 9120AX as EAP-TLS supplicant, AP#show ap authentication statusAP dot1x feature is disabled. There is an option to user credentials for the EAP-PEAP.AP#capwap ap dot1x username user1 password *** How can the AP...

Hi, We are using an Microsoft Network Policy Server as Radius server, with “NPS Extension for Secondary Auth” (with Azure MFA)" as an OTP solution for Remote VPN users. The NPS servers are located at a 3:d party company, so we have no insights in how...

I have a Public certificate that I would like to use for portal access, I followed the commands on this document to generate a private key from it:https://www.digitalocean.com/community/tutorials/openssl-essentials-working-with-ssl-certificates-priva...

Hello, I would like to configure authentication on my Cisco ESW-520-24p through AAA Server (Cisco ACS). I have configured Access Profile and Login order but authentication through AAA doesn't work. What also need to configure?

Hi All, Could you please recommend the best way to upgrade Cisco ISE appliance from SNS-3495-K9 to SNS-3695- K9Currently hardware is running on 2.2 as SNS-3495-K9  is not supported further version.New Hardware SNS-3695- K9 will install 3.0 and after ...

Hi, my is Ivan.I have an ISE v2.7 ( deployment large 13 nodes) with this alarm:Queue Link Error: Message=From ise1.sec.com To ise2.sec.com; Cause=TimeoutQueue Link Error: Message=From ise1.sec.com To ise2.sec.com Cause={tls_alert;"unknown Ca"}. Some ...

Dear,I am facing an issue with my ISE server, relative to the event "5436 RADIUS packet already in the process".Indeed, I manage the network access (autentication & authorisation) of my wireless Guest network through an ISE server (radius). All the t...

Hi, can you please advise the best way to check how many of the Plus and Apex licenses applied, are actually in use by ISE over a 3 month period? Is there a CLI command to do this? Or can it only be done via the GUI?  The version of ISE being used is...

I require to remove AAA configuration and put back again after complete my activity,Can you please guide me, what would be the best way to remove it. My worries is, when I remove beow command at any point of time, Will it throw an error "command auth...