Network Access Control

Hello Everyone,   I am doing new solution with ASA-SSL VPN login Authentication by ISE(external identify source is WIN2008 R2 AD) The topology is that please see the topology map, it is a sample. Device IP info: ASA inside IP 10.254.254.1 outside  I...

Hello,We have a customer who would like to deploy a different CA for EAP-TLS which is not part of the CA which signed the system certificates for ISE used for EAP. We will be importing this root CA in Trusted certificate store in ISE.Would EAP-TLS be...

Is anyone running ACS 5.7 with patch 3 installed? If so, I would like to know the following: How long have you had the patch installed? Have you experienced any issues while using ACS 5.7 with patch 3 installed? I have a change scheduled to install...

Hi, I'm currently attempting to create users into our Cisco ACS V5.6.0.22.4, using the REST API services. I can create/update delete a user entry fine, but I seem to be totally failing at setting attribute values that already pre-defined within the A...

Does anybody know the Maximum length of string type user custom attribute?I cannot find any documents. But tried to find using ISE2.1 Eval OVA. In my testing, it was successful to set 128,000 chars, but it took about 10 minutes  after clicking Save t...

I was told you can not use the "log" option on a DACL so I'm wondering how you fine-tune your DACLs?  I don't want to put a deny ip any any and have no way of knowing what ports are being blocked.

When using tunneled eap, is the outer tunnel solely there to create an extra layer of security for the user/pc credentials that are sent in the inner tunnel via another eap method?

We would like to know if we can enroll the switch (Model 3850 Version 03.07.03E) to our Cisco ISE