Buy or Renew
Buy or Renew

Network Access Control

Cisco Access Control Server (ACS), Identity Services Engine (ISE), Zero Trust Workplace
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Labels

Forum Posts

Start a conversation

Re-IP of ACS5.5 Secondary Instance

Hi, So I have 2 ACS 5.5 appliances that have been working in Primary/Secondary replication mode for several years.  I just moved the secondary off-site and changed it's IP / reflected DNS.  The secondary came up as a primary.  I removed any config i...

ackoch001 by • Level 1
  • 556 Views
  • 2 replies
  • 0 Helpful votes

Import User list in ACS

Dear Team, We want to import bulk of user list in ACS, but the format, which is available in ACS, its not understandable. Please find the below format and help us. name:String(64):Requireddescription:String(1024)dateExceedsEnabled:Boolean(true,fal...

Resolved! All Endpoint View in 2.1

In 2.1, the Administration->Identity Management->Identities was removed (not sure why).  What screen can now be used in ISE to show all the Endpoints in the system?  I just imported 1000 MAC addresses into ISE and while I can see them on the Identity...

paul by • Level 10
  • 2454 Views
  • 11 replies
  • 0 Helpful votes

Resolved! Dictionary attribute Cisco-VPN3000:CVPN3000/ASA/PIX7x-IPSec-Split-Tunneling-Policy

Editing AuthZ profile.  Manually adding ASA VPN attributes.  Getting the following error. Unable to edit Authorization Profile (VPNGroupPolicy) : Value for the dictionary attribute Cisco-VPN3000:CVPN3000/ASA/PIX7x-IPSec-Split-Tunneling-Policy should ...

scamarda by • Cisco Employee
  • 2918 Views
  • 2 replies
  • 2 Helpful votes

ASA TACACS+ webvpn authentication

I run a ASA 5555-X in my lab with code 9.4(3)8.  I recently followed How To: ISE TACACS+ Configuration for ASA Network Devices to configure TACACS+ and it wasn't until I was done that I realized I cannot use TACACS+ for webvpn authentication.  It app...

brilong by • Cisco Employee
  • 4636 Views
  • 5 replies
  • 0 Helpful votes

Cisco ACS re image

Hi Support I seek your advice, we are attempting to re image ACS-1120 with ACS Release 4.2(1) We’ve tried to run a chkdsk with a Windows 2003 server disk, this ran fine but we are still unable to reimage the ACS. We have tried booting from the ACS 1...

ACS 5.4 MAR concerns

We are looking at adding windows machine authentication to our wireless policy and to do so with ACS it appears you need to use MAR. From what I have found the window machine authentication is only done once when a user logs into the machine. My ques...

Resolved! Cisco ISE 2.1 & WLC Version Info

Hi Team,Customer is looking to rollout Cisco ISE for WiFi soon, and Partner has recommended they should upgrade their WLC’s to the listed supported version in the ISE 2.1 compatibility Matrix. They have come back with a specific question around versi...

ankaushi by • Cisco Employee
  • 1066 Views
  • 3 replies
  • 2 Helpful votes

join active directory to ise

hello i m working on identity service engine version 2.0 and i install active directory on windows server 2012.when i want to join active directory to ise using ise interface i can't add it.when i click on active directory and then add nothing happen...

Resolved! Redirect dACL doesn't work

Hi guys,I apply some dACL that need to redirect unauthorized machine to "self-registered guest portal"I can see that my dACL applied successfully on the switch port (c3750 interface Fa2/0/8) but it doesn't redirect the machine to the portalAny sugges...

Load more