Network Access Control

Hello. I recently upgraded the Cisco NAC Agent to the latest version (4.9.1.13) on a Windows 8 VM. The release notes state that Windows 8 support has been added, and that a patch must be downloaded. However, the information about the patch is vague. ...

I have inherited an ISE deployment, and am struggling with how to view the status of the individual license that each server has in a distributed setup. The literature says each virtual appliance comes with a 90 eval license and before going into pro...

Hi all, I have a ACS 5.8 newly deploy, client using Nexpose from Rapid7 to scan for vulnerability and found out that TCP Sequence Number Approximation Vulnerability (tcp-seq-num-approximation) is one of the vulnerability however after checking on ...

Hello, On some machines frequently I see the following issue - upon login the machine hits policy for client provisioning and ISE Posture Agent checks software for compliance. It checks, founds that it is compliant, but no COA is being sent and the ...

Hello,In ISE v 1.4 in Policy Elements -> Results -> Client Provisioning -> Resources while creating ANyconnectConfig profile there is a "Select AnyConnect Package" field. Can you please tell me the meaning of this field? Does it mean I can use differ...

Hi, My question is about reenabling AAA on a device. I have a company A that had their devices and their AAA configuration. Now company A was bought by company B and the devices of company A are migrating to configuration standard of B. Network engi...

We are currently running ISE 1.3 with the AnyConnect client at a University.  Since Windows 10 is coming out as a free upgrade for individuals running Windows 7 and Windows 8 later later this month.  We are expecting to see quite a few students comin...

I have a what I consider to be an issue.  I'm running OpenLDAP integrated with FreeRadius and I have a NetworkAdmins group configured.  This group, I want to have full priv15 and the users should drop into enable mode upon their initial successful lo...

I have been tasked to setup a bunch of remotes sites to a different AAA/TACACS server. Can I run the old settings and the new settings on a router without any conflicts? What issues could I run into?

Hello I see ports 80,443,8443,8905, 8910, 9002, 9090 are opened on ISE and would like to close these ports from the wireless network. Can someone please advise if this is possible and if there are any concerns closing these ports. Thank you Sarat

I have a problem deleting files from the disk of my ACS 5.6 System, running on appliance (SNS-3415). In former I created some directories for different repositories.In one of those there are many orphaned files (about 42GB) that I want to delete. Unf...

My ACS went down today and when I brought it back up, the last log collected happend right before the shutdown. Everything is working fine except for the Live Authentication log. All processes are running as well. Any ideas?

I have the below radius configuration set on my Cisco 2921 running 15.2(4)M6. I'm having issues with setting the enable password to also use the radius group. For example, If I add "aaa authentication enable default group RADIUS_GROUP enable" to the ...