Cisco ISE Installation

HI SIRS
I have a big problem with cisco identity service engine 1.0 ,
cisco said that you can install this software on esx 4.0 , I have tried it but in does not work ,
Is there anyone here to work with this new software?
I wonder , if you could help me.
BEST REGARDS.

For  the ISE installation (any version) kindly refer to the hardware  requirement this helps and make installation very easy. Also do check  the following links for vmware machine and ise installation
http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_vmware.html
http://www.youtube.com/watch?v=TZuCK610TJI

Similar Messages

  • Cisco ISE installation on VMware Workstation ?

    I am trying to install Cisco ISE image through Vmaware Workstation , but after starting VM getting redhat console but not the same console required for setup of actual ISE . Would like to know whether VMware workstation supported for ISE installation as all the cisco docs specifies the image to be mounted on ESX server, then login to client to run setup.. Please help...

    Cisco "Officially" supports VMWare's ESXi/vSphere platform.  Yes, ISE works in VMWare Workstation, but is not tested on every hardware platform available, therefore, not supported.  The the case mentioned above,
    I've started installing ISE 1.2 (redhat linux 5 64 bit)  , looking at the posts above.. on VMware workstation 9..
    1stly I gave 6gb ram ( my laptop has 6 gb ram & 290gb free space ) and started the installation process..
    then  after the starting stage of checking the requirements of my laptop  started and the formatting of the disk began , my lap became very slow  & it got hanged there..all my pc processes moved like snails..!! got  frustated..
    then I restarted my lap and this time I gave 4gb ram .. and it worked fine from then on..
    can  anyone tell me , if this has to do anthing with the physical memory we  give over there in the ise installtion process..does it actually use the  entire ram we mention over there..??
    Niklas
    All possible System RAM was allocated to the ISE VM, and the ISE VM used ALL of the RAM leaving none for the host OS, thereby slowing the machine to a crawl.  Once this Virtual RAM was sized to the ISE minimum of 4GB (leaving 2GB dedicated to the host OS), the machine worked correctly.  Yes, the ISE VM will happily use ALL the RAM allocated to it.
    This is also the reason that Virtual Box and other "Desktop" class virtualization environments cannot be supported across the board.  Nearly every machine hosting VMWare Workstation, Virtual Box, etc... has a different chipset, video card, HD controller, and on, and on...
    The best thing to do for your situation is to try to install it.  If it works, document your EXACT system configuration and the EXACT virtual configuration so that you may look back to it for future installs.  You can also use this information to "tweak" the virtual settings until you get a combination that works for you.  This will help to document the configurations that do not work on YOUR desktop environment.
    Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.
    Charles Moreton

  • Cisco ISE Installation on C22 M3

    Hello All ,
    i have to install Cisco ISE 1.2 on VMware (ucs server C22 M3) , i was searching for OVA file but no luck . can any send me the link to download the same .
    thanks .

    you can download it from the following link but you need to have access to it and have valid Cisco account
    http://software.cisco.com/download/release.html?mdfid=283801620&softwareid=283802505&release=1.2
    ******Do rate helpful posts************

  • Cisco ISE patching find out

    Hi all,
    Would like to find out on patching process on inline posture node.
    My topology is one ISE appliance node type is Admin/Policy Service Node; while another unit is inline posture node.
    Both appliance have the identical software versiona and patch, namely 1.1.3.124, patch 2
    I would like to update it to patch version 4.
    My question:
    01. If i apply the patch on the Admin/Polic Service Node using GUI patch maangement, will this also apply the patch to Inline Posture node?
    02. Or should i use console into Inline Posture node and using CLI way to update the patch? Anything i should mention in this process, example: stop application etc?
    Please advice, million thanks
    Noel

    Resolved Issues in Cisco ISE Version 1.1.0.665—Cumulative Patch 4
    Lists the issues that are resolved in Cisco Identity Services Engine Maintenance Release 1.1.0.665 cumulative patch 4.
    You must deploy this patch on Cisco Identity Services Engine Maintenance Release 1.1.0.665 (with or without patch 1, 2, and 3 applied), otherwise the patch install will fail and Cisco ISE will return an error message stating, "This patch is intended to be installed on ISE 1.1.0.665."
    To obtain the patch file necessary to apply the patch to Cisco ISE Release 1.1, log into the Cisco Download Software site at http://www.cisco.com/cisco/software/navigator.html?a=a&i=rpm (you might be required to provide your Cisco.com login credentials), navigate to Security > Access Control and Policy > Cisco Identity Services Engine > Cisco Identity Services Engine Software, and save a copy of the patch file to your local machine. Then refer to the "Installing a Software Patch" section of the "Administering Cisco ISE" chapter of the Cisco Identity Services Engine User Guide, Release 1.1. for instructions on how to apply the patch to your system.
    If you experience problems installing the patch, please contact Cisco Technical Assistance Center.
    Cisco ISE Patch   Version 1.1.0.665—Patch 4 Resolved Caveats
    Caveat
    Description
    CSCui22841
    Apache Struts2 command execution   vulnerability
    Cisco ISE includes a version of Apache   Struts that is affected by the vulnerabilities identified by the following   Common Vulnerability and Exposures (CVE) IDs: CVE-2013-2251. This fix   addresses the potential impact on this product.
    Managing Software Patches
    You can install patches on ISE servers in your deployment from the primary administration node. ISE patches are usually cumulative; however, any restrictions on the patch installation will be described in the README file that will be included with the patch. Cisco ISE allows you to perform patch installation and rollback from either the command-line interface (CLI) or GUI.
    Standalone Deployment
    When you install or roll back a patch from a standalone or primary administration node, ISE restarts the
    Application. You might have to wait for a few minutes before you can log back in.
    Distributed Deployment
    When you install or roll back a patch from the primary administration node that is part of a distributed deployment, Cisco ISE installs the patch on the primary and all the secondary nodes in the deployment. If the patch installation is successful on the primary node, Cisco ISE then proceeds to the secondary nodes. If it fails on the primary node, the installation is aborted. However, if the installation fails on any of the secondary nodes for any reason, it still continues with the next secondary node in your deployment.
    Installing a Software Patch.
    Please check the below link for step by step installation.
    http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_admin.pdf

  • Manually Patch Cisco ISE Deployment

    Is there a documented process for manually installing patch bundles in ISE? We had a bad experience last spring with deploying Patch 8 through the "fire and forget" patch installation through the GUI. We have held off far too long on patching our 20 node deployment and I will be asked whether the process failure was due to Patch 8, or whether the patching process itself failed. Please let me know if there is a procedure on how one would go about manually patching a deployment via the CLI.
    Thank you

    install a patch from a primary administration node that is part of a distributed deployment, Cisco ISE installs the patch on the primary node and then all the secondary nodes in the deployment. If the patch installation is successful on the primary node, Cisco ISE then continues patch installation on the secondary nodes. If it fails on the primary node, the installation does not proceed to the secondary nodes. However, if the installation fails on any of the secondary nodes for any reason, it still continues with the next secondary node in your deployment. Secondary Cisco ISE nodes are restarted consecutively after the patch is installed on those nodes. While installing a patch on secondary nodes, you can continue to perform tasks on the primary administration node.
    http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/cli_ref_guide/ise_cli/ise_cli_app_a.html#pgfId-2476373

  • Installation of Cisco ISE 1.1.4 on Cisco NAC Appliance 3315

    Hi,
    I am re-imaging the Cisco NAC Appliance 3315 and installing the Cisco ISE 1.1.4...
    After finishing the Installation, when i type "SETUP"... It gives me the below Error;
    # ERROR:  INPUT/OUTPUT ERRORS FOUND DURING THE INSTALLATION!        #
    # PLEASE REIMAGE THE APPLIANCE OR VM FROM THE INSTALLATION MEDIA.   #
    Please advise....
    I tried to change the Time/Date as per UTC/GMT accordingly... But, i didn't find the RAID in CLI... see the link below
    (http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_app_f-installing_on_NAC-AC.html)
    any idea...
    Regards,
    Mubasher Sultan

    Where did you get the recovery media? Did you download from cisco.com?
    Please download the image from CCO and ensure the ISE image is valid by checking the MD5 checksum of the downloaded image is matching to CCO image.You will then need to burn this ISO image onto bootable DVD.
    Supporting link:
    http://www.cisco.com/en/US/docs/security/ise/1.1/installation_guide/ise_ins.html#wp1134146
    Jatin Katyal
    - Do rate helpful posts -

  • Need Step by step installation guide for Cisco ISE in distributed environment.

                 Hi Friends,
    If anyone is having  step by step installation guide for Cisco ISE in distributed environment please shere!
    I have user guide from Cisco, but does someone have created at the time of actual installation.
    Thanks,
    Sachin

    There is a trustsec 2.1 how to guide on cisco's website. There is also a TrustSec 2.0 ISE Guide floating around that has step by step instructions for setting up ISE 1.0.4. Which is still pretty accurate for the 1.1.1 guide. But if you go through the below site it should give you all the info you need.
    http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns744/landing_DesignZone_TrustSec.html

  • Do I need Cisco ISE VM Part # L-ISE-VM-K9= for ESXi installation

    Hi there,
    Do I need the L-ISE-VM-K9 license to install Cisco ISE on an ESXi ?
    Actually, Cisco ISE can be downloaded with an Eval License for 90 days.
    I know, ISE license (e.g. Base License) is needed.
    Thanks a lot.
    Greetings,
    Norbert

    Just in case you you would like to see the specification of each licence.
    License Type
    Features Supported
    Deployment Type Supported
    License Prerequisite
    License Term(s)
    Base License
    AAA
    Guest Provisioning
    Link Encryption Policies
    Wired
    Wireless
    VPN
    Perpetual
    Advanced License
    Device Onboarding/Provisioning
    Device Profiling and Feed Service*
    Host Posture
    Security Group Access
    Integrated Vendor MDM Support*
    Wired
    Wireless
    VPN
    Base License
    3- and 5-Year Terms
    Wireless License
    Device Onboarding/Provisioning
    AAA
    Guest Provisioning
    Link Encryption Policies
    Device Profiling and Feed Service*
    Host Posture
    Security Group Access
    Integrated Vendor MDM Support*
    Wireless
    3- and 5-Year Terms
    Wireless Upgrade License
    Device Onboarding/Provisioning
    Authentication/Authorization
    Guest Provisioning
    Link Encryption Policies
    Device Profiling
    Host Posture
    Security Group Access
    Wired
    Wireless
    VPN
    Wireless License
    3- and 5-Year Terms
    Cisco ISE Functionality-Based License Options
    License Tiers (T)
    Number of Endpoints Supported
    Base License
    Advanced 3-Year License
    Advanced 5-Year License
    Wireless 3-Year License
    Wireless 5-Year License
    Wireless Upgrade 3-Year License
    Wireless Upgrade 5-Year License
    100
    100 Endpoints
    L-ISE-BSE-100=
    L-ISE-ADV3Y-100=
    L-ISE-ADV5Y-100=
    L-ISE-AD3Y-W-100=
    L-ISE-AD5Y-W-100=
    L-ISE-W-3UPG-100=
    L-ISE-W-UPG-100=
    250
    250 Endpoints
    L-ISE-BSE-250-
    L-ISE-ADV3Y-250=
    L-ISE-ADV5Y-250=
    L-ISE-AD3Y-W-250=
    L-ISE-AD5Y-W-250=
    L-ISE-W-3UPG-250=
    L-ISE-W-UPG-250=
    500
    500 Endpoints
    L-ISE-BSE-500=
    L-ISE-ADV3Y-500=
    L-ISE-ADV5Y-500=
    L-ISE-AD3Y-W-500=
    L-ISE-AD5Y-W-500=
    L-ISE-W-3UPG-500=
    L-ISE-W-UPG-500=
    1000
    1000 Endpoints
    L-ISE-BSE-1K=
    L-ISE-ADV3Y-1K=
    L-ISE-ADV5Y-1K=
    L-ISE-AD3Y-W-1K=
    L-ISE-AD5Y-W-1K=
    L-ISE-W-3UPG-1K=
    L-ISE-W-UPG-1K=
    1500
    1500 Endpoints
    L-ISE-BSE-1500=
    L-ISE-ADV3Y-1500=
    L-ISE-ADV5Y-1500=
    L-ISE-AD3Y-W-1500=
    L-ISE-AD5Y-W-1500=
    L-ISE-W-3UPG-1500=
    L-ISE-W-UPG-1500=
    2500
    2500 Endpoints
    L-ISE-BSE-2500=
    L-ISE-ADV3Y-2500=
    L-ISE-ADV5Y-2500=
    L-ISE-AD3Y-W-2500=
    L-ISE-AD5Y-W-2500=
    L-ISE-W-3UPG-2500=
    L-ISE-W-UPG-2500=
    3500
    3500 Endpoints
    L-ISE-BSE-3500=
    L-ISE-ADV3Y-3500=
    L-ISE-ADV5Y-3500=
    L-ISE-AD3Y-W-3500=
    L-ISE-AD5Y-W-3500=
    L-ISE-W-3UPG-3500=
    L-ISE-W-UPG-3500=
    5000
    5000 Endpoints
    L-ISE-BSE-5K=
    L-ISE-ADV3Y-5K=
    L-ISE-ADV5Y-5K=
    L-ISE-AD3Y-W-5K=
    L-ISE-AD5Y-W-5K=
    L-ISE-W-3UPG-5K=
    L-ISE-W-UPG-5K=
    10,000
    10K Endpoints
    L-ISE-BSE-10K=
    L-ISE-ADV3Y-10K=
    L-ISE-ADV5Y-10K=
    L-ISE-AD3Y-W-10K=
    L-ISE-AD5Y-W-10K=
    L-ISE-W-3UPG-10K=
    L-ISE-W-UPG-10K=
    25,000
    25K Endpoints
    L-ISE-BSE-25K=
    L-ISE-ADV3Y-25K=
    L-ISE-ADV5Y-25K=
    L-ISE-AD3Y-W-25K=
    L-ISE-AD5Y-W-25K=
    L-ISE-W-3UPG-25K=
    L-ISE-W-UPG-25K=
    50,000
    50K Endpoints
    L-ISE-BSE-50K=
    L-ISE-ADV3Y-50K=
    L-ISE-ADV5Y-50K=
    L-ISE-AD3Y-W-50K=
    L-ISE-AD5Y-W-50K=
    L-ISE-W-3UPG-50K=
    L-ISE-W-UPG-50K=
    100,000
    100K Endpoints
    L-ISE-BSE-100K=
    L-ISE-ADV3Y-100K=
    L-ISE-ADV5Y-100K=
    L-ISE-AD3Y-W-100K=
    L-ISE-AD5Y-W-100K=
    L-ISE-W-3UPG-100K=
    L-ISE-W-UPG-100K=
    Cisco ISE Functionality-Based License Options
    License Type
    License SKU
    Base License
    L-ISE-BSE-[T]=
    Advanced 3-Year License
    L-ISE-ADV3Y-[T]=
    Advanced 5-Year License
    L-ISE-ADV5Y-[T]=
    3-Year Wireless License
    L-ISE-AD3Y-W-[T]=
    5-Year Wireless License
    L-ISE-AD5Y-W-[T]=
    3-Year Wireless Upgrade License
    L-ISE-W-3UPG-[T]=
    5-Year Wireless Upgrade License
    L-ISE-W-UPG-[T]=
    Replace [T] with the appropriate license tier from Table 5 and 6.
    Jatin Katyal
    - Do rate helpful posts -

  • Cisco ISE 1.2 Ise Application doesn´t install

    Hello,
    I am trying to install Cisco ISE on a VMWare Paltform, and the installation goes OK for the ADE-OS (The Os is installed, but the ISE application doesn´t install.
    Any Hint in how to solve that ?
    BR,
    Julio

    Hi all,
    Thank for your answers, the problem was that the ISO image on the Cisco software repository was corrupted. I finally did a md5 check, and downloaded the image 4 times.
    The for images download matched the md5 checksums between themselves, but not the Cisco webpage. Finally a TAC engineer had to publish the image form me, and when downloaded from this link It matched the CCO md5 and it worked fine.
    BR,
    Julio.

  • Performing "offline" compliance module update to new ISE installation

    Hi everybody,
    I am just wondering if anyone knows how perform compliance module on a new ISE installation to get the AV and AS updates, while the ISE is "offline", (not connected to Cisco/Internet).
    The ISE has Advance Service license, but the customer's security poilcy prohibits connecting any device on their IntraNet to the internet, and if there is any updates to get from the Internet, then it has to be received on the internet network and manually transport it to the IntraNet.
    Appreciate your input.
    Mike

    To upload offline posture updates, complete the following steps:
     Step 1 Go to https://www.cisco.com/web/secure/pmbu/posture-offline.html .
    Save the posture-offline.zip file to your local system. This file is used to update the operating system information, checks, rules, and antivirus and antispyware support charts for Windows and Macintosh operating systems.
    Step 2 Access the Cisco ISE administrator user interface and choose Administration > System > Settings > Posture .
    Step 3 Click the arrow to view the settings for posture.
    Step 4 Choose Updates . The Posture Updates page appears.
    Step 5 From the Posture Updates page, choose the Offline option.
    Step 6 From the File to update field, click Browse to locate the single archive file (posture-offline.zip) from the local folder on your system.
    Note The File to update field is a required field. You can only select a single archive file (.zip) that contains the appropriate files. Archive files other than .zip (like .tar, and .gz) are not allowed.
    Step 7 Click the Update Now button.
    Once updated, the Posture Updates page displays the current Cisco updates version information under Update Information.

  • MAC OS X unable to download Cisco ISE supplicant agent

    Hi,
    I have a problem with MAC OS X clients unable to download the Cisco ISE supplicant agent using Safari browser but able to login on the ISE guest portal. If the same client was to login to the ISE guest portal using Firefox; it has no issues downloading the ise supplicant and posture agent.
    I have tried to update the Java version on the client to the latest; however it does not resolve the issue. As I am new to MAC OS clients; I was wondering what may be the cause of the issue?
    I have summarized the issue as follows:
    1. MAC OS X 10.8 with safari 6 -- unable to download agent but can login successfully on the Cisco ISE guest portal
    2. MAC OS X 10.8 with Firefox -- able to login to Cisco ISE guest portal and download agents; no issues
    3. MAC OS X 10.7 with safari and firefox ---  unable to download agent but can login successfully on the Cisco ISE guest portal
    4. Windows XP & Windows 7 & Iphone/Ipad/Android -- able to login/download agent without any issues
    Any suggestions is appreciated.
    Thanks.

    For Agent Download Issues on Client Machine
    • Ensure that a client provisioning policy exists in Cisco ISE. If yes, verify the
    policy identity group, conditions, and type of agent(s) defined in the policy.
    (Also ensure whether or not there is any agent profile configured under Policy >
    Policy Elements > Results > Client Provisioning > Resources > Add > ISE
    Posture Agent Profile, even a profile with all default values.)
    • Try reauthenticating the client machine by bouncing the port on the access
    switch.
    Remember that the client provisioning agent installer download requires the following:
    • The user must allow the ActiveX installer in the browser session the first time an agent is installed
    on the client machine. (The client provisioning download page prompts for this.)
    • The client machine must have Internet access.
    Client Machine Operating Systems and Agent Support in Cisco ISE
    Check the following link
    http://www.cisco.com/en/US/docs/security/ise/1.1.1/compatibility/ise_sdt.html#wp95449

  • Cisco ISE: Error 5411 No response received ...

    Hi all,
    we've been running Cisco ACS version 4.x half a year ago, but decided to upgrade to Cisco ISE. So we've made a fresh installation with our cisco partner. At the moment we're live with this equipment, but running in a lot of troubles, as we're receiving a lot of those errors each day. Once the users restart their PCs a few times the problem is solved, but at the moment its pretty annoying:
    No response received during 120 seconds on last EAP message sent to the client
    Steps from the detailed view:
    11001  Received RADIUS Access-Request
    11017  RADIUS created a new session
    Evaluating Service Selection Policy
    15048  Queried PIP
    15048  Queried PIP
    15004  Matched rule
    11507  Extracted EAP-Response/Identity
    12500  Prepared EAP-Request proposing EAP-TLS with challenge
    12625  Valid EAP-Key-Name attribute received
    11006  Returned RADIUS Access-Challenge
    5411  No response received during 120 seconds on last EAP message sent to the client
    Allowed Protocol: EAP-TLS and PEAP
    Authentication Protocol : EAP-TLS
    Actually I don't know which version we're running. Where can I check the proper release once on the webinterface?
    Switches are 3750x with the following switchport configs (some things has been xxx-out), Firmware is Version 12.2(55)SE1:
    interface GigabitEthernet1/0/1
    description xxx
    switchport access vlan xxx
    switchport mode access
    switchport voice vlan xxx
    srr-queue bandwidth share 10 10 60 20
    queue-set 2
    priority-queue out
    authentication event fail action next-method
    authentication event server dead action authorize vlan xxx
    authentication event no-response action authorize vlan xxx
    authentication event server alive action reinitialize
    authentication host-mode multi-domain
    authentication order dot1x mab
    authentication priority dot1x mab
    authentication port-control auto
    authentication periodic
    authentication timer reauthenticate 28800
    mab
    mls qos trust device cisco-phone
    mls qos trust cos
    macro description cisco-phone | cisco-phone
    dot1x pae authenticator
    dot1x timeout tx-period 15
    dot1x timeout supp-timeout 15
    auto qos voip cisco-phone
    spanning-tree portfast
    spanning-tree bpduguard enable
    service-policy input AutoQoS-Police-CiscoPhone
    Can someone introduce anything to solve the problem, maybe some misconfiguration or improvements before starting a TAC-Case.
    Thanks in advance
    regards
    Marc

    The Global Help icon is located in the bottom left corner of the Global  Toolbar in the Cisco ISE window. You may check the ISE version there.
    To launch Global Help, complete the following steps:
    Step 1 On the global toolbar, move your cursor over the Help icon.
    Step 2 Choose Online Help from the pop-up menu.
    A new browser window appears displaying the Cisco ISE Online Help.
    ~BR
    Jatin Katyal
    **Do rate helpful posts**

  • New Cisco ISE 1.3 software on IBM x3250 series ?

    Hi All,
    i need clarifications concerning those three questions :
    -              As the Cisco ISE 1.3 is released few days ago, is it possible to install it on another hardware vendor like IBM x3250 series?
    -              If yes how we will manage with smartnet contract ?
    -              What the ISE SNS Accessory Kit contain exactly ? indeed we are building ISE solution and need to see if UCSC-RAIL1= and N20-BKVM= are already included in ISE-SNS-ACCYKIT. 
    thks
    Jules

    1. You can install ISE on an ESXi server meeting the hardware requirements. You cannot install it on a 3rd party server "bare metal" installation. (At least not in any supported manner.) Reference.
    2. Your software license entitles you to support on the software in a virtual environment. The hardware is handled between you and your preferred hardware vendor or support company.
    3. The rails and KVM adapter should be included in the Accessory Kit.

  • Cisco ISE Root CA

    Hi all,
    I have a query on onboarding iOS, Android and windows devices through Cisco ISE.
    I understood that we are going to provision and onboard above devices issuing certificates.
    Do ISE has Certificate authority where it can generate its own Root CA and Intermediate CA signed by root CA and device certificates signed by intermediate CA i mean profile signing CA???
    Or else we need to create CSR and send it to CA to get it signed . then we have to import root, intermediate CA's to ISE. CA's like godaddy ,verisign...when we send CSR .. do they send  root certificate, intermediate certificate and signed certificate??
    Thanks
    Srikanth

    HI,
    After installation, ISE generates, by default, a self-signed local certificate and private key, and stores them on the server.  ISE authenticates itself to clients using the default self-signed certificate that is created at the time of installation. This self-signed certificate is used for both HTTPS and EAP protocols to authenticate clients. This self-signed certificate is valid for one year and its key length is set to 1024 bits. At the time of generation, this certificate is used for both EAP and HTTPS protocols.
    Cisco strongly recommends installing a CA-signed certificate.(Dont use self generated certificare from ISE).
    Process for certificate deployment:see the link:
    https://www.youtube.com/watch?v=d-ro6P2Azl8
    Regards

  • Afaria 7 SP3 integration with Cisco ISE

    Hi,
    I am trying to find the configuration procedure that is needed for Afaria MDM to integrate with Cisco ISE 1.2.
    1. What service should be installed/enabled?
    2. Which port or service path (<IP:port/abc/xyz?>) it will listen for the communication from Cisco ISE?
    3. Cisco ISE uses REST API to communicate with Afaria. Does this require REST API installation or service activation?
    4. What type certificates are supported in Afaria for this integration.
    5. Anything that related to this topic.
    Appreciate if someone can provide the configuration procedure or any information possible.
    Regards,
    Mudasir Abbas

    From the user guide it seems that LDAP only allows you to strip the prefix/suffix and can't add the suffix.
    http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_man_id_stores.html#wp1054421
    Strip start of subject name up to the last occurrence of the separator
    Strip end of subject name from the first occurrence of the separator
    Regards,
    Jatin
    Do rate helpful posts-

Maybe you are looking for