We have 2 OCSP responder certificates that we have newly renewed but they are still sending alerts that the certificates are going to expire despite them not even showing in the CA certificates anymore.Is there a way to stop this?
Hi everyone, i am looking for a way to posture windows and MAC clients without remediation, i mean, if a posture policy doesn't comply, the client is declared automatically not compliant and the corresponding authorization policy match (in my case, o...
Hi Guys, Does anyone has experience on the Cisco ISE v2.4 (On prem - virtual) to Cisco ISE v3.x on AWS? Existing ISE is configured to be 802.1x authentication both wired and wireless. Is there migration tool/steps possible or it has to be new setup a...
Hi,I am upgrading a 4 node deployment via the CLI.I upgraded the PAN without issue. Then moved on to the SAN.During the process, my wifi cutout.. It has been 1 hour, I have logged back into the CLI, unsure how to proceed.Currently copying over a supp...
Dear All,We have created user for wireless from cisco ISE (Identities -> Network Access Users -> New User) and set ' Change Password Next login'. When the user is trying to connect the SSID with username and password, he is getting the prompt of next...
Hi !!I want to ask if can we create conditions or policy rules using ERS,if we don't, should I write a script python to do this via postman.
Hi Team, Greetings. I have a question regarding Cisco ISE Integration with Azure Using ROPC - EAP TLS for WiFi User Authentication. We are doing PoC with Our customer to Implement 802.1x/EAP-TLS with Azure (by using ROPC), based on documentation : ht...
Hello Technical Support Community,I am currently working on a project that involves adding endpoints in Cisco Identity Services Engine (ISE), and I'm seeking guidance or assistance from the knowledgeable members of this community.I have installed Cis...
Hello, i'm facing a problem with client authentication on guest wifi when the request is handled by a specific psn and its relative portal.The environment consists of two machines both acting as pan/psn/mnt.When the connection request arrives to psn1...
If our current setup is on ise 2.7 and license has already converted to smart licesnse.Can we upgrade from 2.7 to 3.2 directly using same license or we need to first upgrade from 2.7 to 3.1?
Dear Colleagues,I have upgrade Cisco AnyConnect Agent V4.x to Secure Client V5.x vai Microsoft SCCM deployment. SCCM Deployment Successful.Endpoints got all Secure Client Application.Posture file is located to the correct location by SCCM.Configurati...
Hello Community,I am wondering if anyone could offer some advice to architect a disaster recovery scenario.We have 2 nodes (primary and secondary) that handle all the authorization and back each other up in case of failures.We are wanting to replicat...
Hi AllJust a quick question for a confirmation.If i have a bunch of vlans and only some have `ip access-group <description> in` and others do not.But i have a bunch of ip access-groups unassigned to Vlan interfaces.Will the vlans with unassigned ip ...
I am working on setting up ISE for a client that uses Shoretel Phones. I created a profile for the devices so we can use MAB. However, even though the switches and ISE show the phone passing authentication and authorization, the phone does not get ...
Hello, We need to configure SSID in Meraki dashboard for our BYOD network to use a captive portal with SSO authentication. the flow is from Meraki > to ISE > to Azure IDP. Our goal is to be 100% password less. We will be using certificates for mana...
