Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more

Network Access Control

Cisco Access Control Server (ACS), Identity Services Engine (ISE), Zero Trust Workplace
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Labels

Forum Posts

Start a conversation

ACS Host_Key

I'm attempting to create the "crypto host_key" on our ACS box in order to connect to our SFTP server for logging.  When I issue the command:"crypto host_key add host x.x.x.x" I receive the following error: "%host-key add failed" I have deleted any ho...

Resolved! CISCO ACS 5.7 Upgrade

Good Morning; I am in the process of upgrading our ACS 5.6 VM servers to ACS 5.7. The ISO File, 5.7 Tar, and Base Patch works fine. The issue  we are running into appears to be after each cumulative patch upgrade. The "Show Application Status ACS" di...

nhkelley1 by • Level 1
  • 1065 Views
  • 9 replies
  • 0 Helpful votes

Resolved! Cisco ISE SHA256RSA and RSASSA-PSS

Hi All, In the process of building Cisco ISE 1.4 for a customer. Will Cisco ISE EAP-TLS authentication work with a server certificate that has Signature algorithm of sha256RSA and signature hash algorithm of sha256. Client certificates also use signa...

Phil Neil by • Level 1
  • 5046 Views
  • 3 replies
  • 0 Helpful votes

Resolved! pxGrid persona in standalone deployment for small number of concurrent sessions

Hi everyone,From reading the design guides on pxGrid, I understand that it is recommended to use a distributed deployment model with separate, dedicated nodes for the primary and secondary pxGrid controller.  However, for small deployments where we w...

danbates by • Cisco Employee
  • 1412 Views
  • 3 replies
  • 0 Helpful votes

Resolved! ISE 2.1 Changing FQDN

Is there a way to change the fqdn w/o needing to re-configure ISE from scratch? I have a 2-node deployment.  The domain is changing - so I have a new wildcard cert for the new domain, but the server's current fqdn won't work w/ the new cert.

moody by • Level 1
  • 12748 Views
  • 3 replies
  • 0 Helpful votes

Resolved! "Enable Password Change" MS-CHAPv2 option and expired AD users passwords

Hi everyone!Can someone please clarify what exactly to expect when AD user password has expired? Without any dot1x in place, on the next login user will be notified about the expired password and will be prompted by the login window itself to set the...

valinev by • Cisco Employee
  • 5262 Views
  • 3 replies
  • 5 Helpful votes

Resolved! ISE 1.4 Compatibility

Dear Team,Kindly need confirmationBased on compatibility in link below :http://www.cisco.com/c/en/us/td/docs/security/ise/1-4/compatibility/ise_sdt.htmlMicrosoft Windows 10 is supported in ISE 1.4 patch 3 &Mac OS 10.11 is supported in ISE 1.4 patch 6...

riferdiy by • Level 1
  • 677 Views
  • 1 replies
  • 1 Helpful votes
View All