Network Access Control

Hey guys, I have two ISE nodes in the DMZ hosting the guest portal for 'One Click Approval'. The dilemma I have is the 'Approve' (or 'Deny') URL as shown below. By default, this is the IP address of the ISE node which the guest used to create an acco...

Do we have a roadmap on when we will stop supporting 3495 with new versions of code?  Are these appliance still supported on 2.4?

Hi team,I got the request to return to the WLC the radius:username attribute in the authorization profile when doing CWA, because all subsequent connections currently end up with the MAC address instead of the guest username in the WLC session report...

ISE 2.1 patch 6Meraki 25.8When we enable 'Layer 2 LAN isolation' feature in Meraki we do not get Redirect URL on clientDisabling this feature everything works fine.Does this feature cause any issues with redirection? Or do we need some other configur...

Hi,I am trying add custom attributes for Juniper Netscreen TACACS+ authentication to a v5.2 ACS. The advice is to add it to the group as follows:ervice = netscreen { vsys = root privilege = read-write } I know how to add this to a version v4.x ACSHow...

Hi,How can we configure Radius attribute Class (25) as a condition in AuthZ policy? This is a Anyconnect scenario,where user authentication from ASA (Radius Access-Request) is sent to ISE and ISE send it to an external Radius server (Proxy Service). ...

Hello CommunityI have a problem with end users,I have ISE 2.2 configured and only policies to authenticate with 802.1x. everything is fine until ISE detects that it requires a change of password, I say that ISE because it sends a report attached as a...

We have a unique situation where we have a customer deployment where Windows machines are built with a machine certificate and stored in various locations ready for deployment. However the Issuing certificate Server expires soon, which means that the...

Hi Team,Customer running latest version ISE 2.3 where we have seen ISE live log shows only 4  AD-GROUP-NAMES in report. Though if you test the same user from External identity store using "test user" option. ISE fetches lots of groups.Concern we have...

Hi All,I am trying to create a posture condition, to check for any critical patches not installed in the SCCM client.I went through the below docs for the setting this up.How to Integrate Microsoft SCCM with ISE 2.1 PresentationCisco ISE and SCCM int...

Hi Team,Do we have the same steps that are provided on this link (How-to Integrate Infoblox and Cisco Identity Services Engine (ISE) using Cisco Platform Exchange Grid (pxGrid)) with ISE v2.3.Kindly suggest for any changes if required.

Hi,   I want to do posture compliance for the access network. For testing purpose I have already manually deployed AnyConnect ISE Posture Module using the predeployment package. I have configured Profile using AnyConnect Profile Editor. I would like ...