Cisco ISE posture Troubleshooting - 04/09/2026 21:02 EDT

Our network relies on Cisco Identity Services Engine, but recent posture checks are failing and several policy sets are no longer behaving as intended. I need an engineer who lives and breathes Cisco ISE to dive straight into the security-centric side of the platform, isolate the root causes, and rebuild any broken logic so users are authenticated and authorized exactly as our compliance rules demand.

The immediate focus is policy development, enforcement, and the associated troubleshooting workflow—no fresh installs, just refining what is already in place and making sure every posture requirement is met without disrupting production traffic. You will have full access to the existing ISE nodes, logs, and current policy matrix, plus remote console time with our network team for coordinated testing. Expect to interact with TACACS+, RADIUS, and any related network devices that feed into ISE decisions. Solid command of CLI and the web UI is a must, and packet-level analysis (Wireshark, SPAN) will likely be required for the trickier cases.

Deliverables
• Detailed analysis of failed posture checks, including root-cause documentation
• Updated policy sets and conditions, implemented and validated in staging, then promoted to production
• A concise rollback plan for every change
• Final report summarizing what was fixed, why it failed, and recommended next steps for long-term maintenance

Acceptance criteria: all posture assessments pass during live user testing, no unintended authentication drops over a 48-hour monitoring window, and documentation is clear enough for an in-house engineer to follow.