Network Access Control

Dear allI have ACS 5.1 and Catalyst switch 3560 with version 12.2(53)SE. I configure a dacl on the ACS and I use it on authorization profile.This authrization profile is used on access policy. I tried the authentication but it doesn't work. I checked...

Hi,I got an issue with Apple devices such as iPhone and iPADs when connecting through VPN the ISE is not doing profiling with the Apple devices.With Android is working well. We create a policy for Android devices that connect through AnyConnect VPN f...

Hi Team,We are doing a POC with ISE 1.3 and customer is using Anyconnect to permit Win7 endpoint to choose one of their certifcates.Now we release there could be a problem between Anyconnect and HP Connection Manager installed on the endpoints.Custom...

Hi,How exactly failover works between two branches of ISE distributed ISE deployment ?I have a requirement in ISE distributed deployment between two branches of an organization:What i want to achieve is: failover between Branch Office1 in India and B...

Hi,I was reading an older post that says "you have two options to do that, either import all mac address to ISE and have your policy look into this endpoint group with username or have an MDM"the MAC address thing doesn't scale and not the best appro...

Hello,at the moment we use ISE 2.1.0.474 for 802.1x. For our clients we do use machine certidicate authentication. And MAB for Printers, AccessPoints, Linux and Apple Devices.Our Problem is our default PXE option on our windows client. Our thinking a...

Hi expert,I got an query from our ISE end user on the below vulerability:  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170310-struts2but there are some quesitons I need to confirm with you:1. in the vulnerability,...

Hi All,I am running ISE 2.2 with self register portal with sponsor approval. We have 2 sets of sponsor identity sequences, one AD and one SAML, so i believe we need to run 2 sponsor portals. Is there a way to identify the sponsor based on the email a...

Ok, WTH does this mean:  https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd49829 Releases 1.2, 1.3, 1.4 and 2.x are affected. A hot patch for these releases will be provided by the 18th of March. The hot patch will only work on the latest release fo...

Hello Experts,We observe that during posture redirection / system scan, Edge browser automatically popping up "Client Provisioning Portal" without any user intervention. User connects over over VPN and authentication of user credential is successful....