Network Access Control

Hi, It seems we still encounter this issue in 2.1. AnyConnect posture module shows Compliant but in Cisco ISE it got stuck to Pending and the second authentication EAP-FAST fails. Can Cisco confirm whether EAP chaining and posture works or any confir...

Really appreciate if some one  answer my question regarding Cisco ISE Can Cisco ISE version 1.4 supports  https on SMS gateway configurations. I will be using reset API POST method and I want to know how to send  username and password securely. Can...

Hi, I have a Cisco ACS 5.x setup for radius authentication and accounting. As I have a new external device acting as a radius collector; I would like to check if it may be possible to setup ACS to forward radius accounting messages to it? I do unders...

Dear Community, I generate Sign Request, than sign it on CA. Then try to upload it back but error arrise: Certificate Validation Error: 'Certificate binding failed. No matching signing request found.' I used ACS 5.5.0.47 Patch 7. Did anyone went thr...

i have installed cisco acs server 5.3 and applied an eval license. when i am going to define an authorization rule in access policy, i can find and predefined rules and i can not create any rule of my own. if i do any thing i get this error message.A...

Hi experts, I have tried to replicate an issue that my customer is having: issue: when running client provisioning on default port 8905, the portal certificate shows that it's using the certificate created for the Admin. However, when visiting guest ...

Hello, We have 2 ISE in VMWARE (version 2.0.1.130). Every night, our local super admin accounts are getting disabled and I have no idea why.  I was thinking that maybe it has to do with backups, but the account that we use for that is still enabled a...

I'm trying to migrate an authentication proxy command configuration from an older router to a new ISR 4331. It currently uses tacacs+ for authentication. The old configuration has the ip auth-proxy command but in the ISR this command is not available...

Hi, We have ACS 5.8 with interface Gi0 assingened ip address . We want to add secondary ip to Gi0 interface Is it possible ?

Hello, I was wondering what people thoughts are; I have a question about NAC, so, if we have a dot1x enabled port on a switch with a client that is successfully authenticated and authorised to connect to the network, the clients MAC address is entere...