Network Access Control

Hello group, I am having troubles setting up a configuration where the customer wants to enable Anyconnect access to the network using their existing ASA, ACS and RSA. The customer wants to use the user database from his AD.The customer wants the ASA...

Hi, I am using ise captive portal for  authentication and it will redirect . The problem  is it is taking very long time  to once the user connected wireless . If i enable  tcpdump in the ise will give any insight to this problem . I don't where to s...

Dear All, I found this cisco document, that explain how to configure Asa to work with LDP to assign a Group Policy at the Login. http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98634-asa-ldap-group-pol....

Dear all, I’ve configured a web authentication through ISE. And the session timeout value are 4 hours on the 5760 WLC and re-authentication timer value are 12 hours on the ISE. Now an user passes the authentication and connects to wireless when first...

Hi! Does anyone have documentation regarding blacklisting after a supplicant fails the authentication and posturing put in place? Will it be port-based, or will a supplicant be able to plug into another switch port and begin the EAP authentication ...

Hi! Would like to have a single user have full control of administrative rights for the ISE server and then have another category where someone else has limited ability to enforce policy for sponsoring, new-user onboarding and whitelisting. The crit...

Dear Colleagues,We have an opportunity in UK. Public Sector where the customer wishes to “lease” parts of its switch stacks (some ports on their switch stacks) to another government organization.Ideally they would use their own ISE deployments if it ...

Hello,we have a new acs appliance (1113) with version 4.2.1.15 and we have successfully imported the codes for the new vendor Huawei.In the webgui of the appliance you can choose the different administration levels for users and groups.unfortunately ...

someone tell me how can I force the AP 1602i sending HOST-IP attribute (wireless client) when the AP has set up a rule to send radius acct to another device?someone tell me how can I force the AP 1602i sending HOST-IP attribute (wireless client) wh...

Hi Team, In the current design for my customer we are planning to use Certificate Status Validation for their trusted CA (under Certificates/Trusted Certificates). The customer claims that most CA servers implement the CRL checking in a way that auth...

Hello, We know that you can arrange for a password to be reset after so many days, and this will effect all the users and groups on ISE. But what we need to do is make the password to be reset for particular individual groups and not for all of the...

Hi, I would like to know what the expected behaviour of the supplicant if the switch port is not configured for dot1x. I've seen that PCs ( with anyconnect or windows native client ) send around 3 EAPOL messages and ignore dot1x and continue with th...