Network Access Control

HiDoes anybody know a way how to filter within an ACS 5.2 rule on the certificate issuer CN within the certificate dictionary condition?I want to allow only certificates from a specific subordinate CA to access a specific resource.

Hi All,   I have a client he has two data vlan's 100,101. He doesnt want to segregate the user type, But he wants that if user connects to any of the WLC in the enviorment, He should be connected to any  data VLAN's. On ISE, I can create rule, based ...

I am running Cisco ACS( Version : 5.4.0.46.0a)  802.1x with certificate based authentication for Wired connections. the issus is i found some authentication failed messages in some switch port. when I troubleshooting in ACS, it is an error: "22056 Su...

Currently running 1.4 patch 3. After a sponsor creates a guest account, that guest can not auth due to it being marked as disabled in the internal database. A couple of people on the forums had this problem, but the solutions for 1.1 and 1.2 dont mat...

Hi to all,we're using ISE 1.4.0.253 patch 3.Somehow the guest tickets created from sponsor portal have the wrong duration.For example:duration of 3 daysstart time: 2015-08-31 8:12amend time: 2015-09-02 8:12amthat's just 2 days instead of 3!In the tic...

HI Friends,We recently installed ISE in our company for guest access and using hotspot feature for authentication.we have 3 ISE nodes in VM, admin, moni and policy. all having 32 GB RAM and minimum of 300GB HD. The issue is we getting user complaints...

Hi, folks.has anybody an idea why ISE 1.x (1.4 exactly) is constantly throwing an alarm that one/all of the configured nameservers may be down ?? This alarm constantly repeats, but the configured nameservers are of course reachable and the dns servic...

Hi Community I walked around this bug, but was not able to find the real reason and solution for it. The setup is like this:=== PRIMARY HOST:Int Gig 0 ip addr 1.1.1.1/24Int Gig 1ip addr 2.2.2.2/24FQDN: ise1-gig0.adm-abc.comdefault Gateway 2.2.2.1=== ...

Hi Cisco ISE Gurus,My client just found an issue with ISE configured switch.  When a laptop connected to a switch port with ISE configured,  the MAC address will stick to that port and even if the laptop is unplugged. So when the user connect the lap...

We are going to implement dot1x authentication and I'm doing some tests right now. I had it working before configuring some other ISE features, but now when I boot up when connected to a port, Operations > Authentication in ISE shows the authenticati...

There is a bug in 1.4 patch 3 on the SMS gateway settings of ISE. If you attempted to add a new SMS gateway with the SMS Email Gateway option you have to enter an e-mail address in the optional Provider account address and SMTP API destination addres...

I'm trying to setup 802.1x on switch with Microsoft NPS Server as RADIUS Server just for DATA VLAN authentication, no voice VLAN authentication...When I run the command "authentication host-mode single-host" it doesn't apply the config on the interfa...