Network Access Control

I have WLC (7.4) that uses 802.1x auth with our ACS (5.3)Our ACS connects to our AD as external identity.How can I limit the max sessions per AD usersAccess Policies > Max User Session Policy >  Max Session User Settings-That would affect all my Acce...

Hi! I am new to ISE world. I have different Authorization policy based on computer and user. Once the computer start it will assign to vlan based on its security group membership. If a user login to same computer then second Authorization clicks in I...

Dear all, I have to change the IP address of a ACS 5.7 on a Cisco 3495 appliance.Is this possible without the need to replace the license file? Or what is the unique information that this license will work on this hardware?We have the base license a...

Hi,   I have a use case where i need to configure ISE at two different geographical locations:  HO (India) and BO (USA). Requirement is, if the ISE server fails at US Branch, all the endpoints must automatically fail-over to HO (India) an...

Hello, I am facing an issue for AAA authentication of Nexus switch for AD users via ACS 5.8. Following is the configuration on Nexus: aaa group server tacacs+ ACS_GRP    server 10.2.200.101    use-vrf management    source-interface mgmt0aaa authent...

According to some discussion groups and Apple's notes, "OS X El Capitan will not connect to a server that allows negotiation with a 512-bit or smaller group." This applies to 802.1x supplicants as well. Consequently, we want to check what the minimum...

Scenario: I have up and running ISE 2.1 appliance 3415. Its role is set to Primary. When I try to register other node as Secundary everything looks fine. I get the status Pending, but then it fails with error. I have reset-config to factory defaults ...

I'm working on getting ISE Guest authentication on a WLC working and ran into an issue.  The guest network is on a totally isolated network from production.  I was wondering if anyone ever setup ISE with one interface for management and one interface...

I would like to integrate Cisco ISE with IBM Lotus Notes LDAP but I cannot find any example document in Cisco Web and others. I am not Cisco ISE 2.1 can query user information from Lotus Notes LDAP. If anyone has the example configuration or can co...

Hi all; I'm working on ISE to learn security materials. recently I faced with some strange behaviors on ISE and found that all of them are unresolved bugs. if you have any idea on how to resolve them or you have any workaround, please let me know.  ...

Hi, A customer has ISE wireless upgrade licenses that are good until 2019. The ISE wireless licenses he has expire this month. Those licenses are End of Life so he cannot reorder these to make both term at the same time. In October, I was told he wou...