Network Access Control

AllI have a customer who is running ACS appliances in a cluster and would like to take a phased approach to the effort. Do we anticipate any fallout from and operation or a support perspective if they proceed in that manner? Current ACS OS version an...

Hello All,I have a customer that is receiving the following alarms on ISE 1.3 patch 3:Log collection error: Server=psn1; Log Type=AUPAcceptanceIt appears to be related to a log not being sent after the AUP is accepted.  It does not appear to impact f...

Hi, I have a customer who currently has ACS 5.2 on two 1121 appliances with no SmartNet or SAS. They want to upgrade to ACS 5.8 and want the following three options quoted:Upgrade to ACS 5.8 on existing 1121 - (2 x CSACS-5.8SW-MR-K9= is what I curre...

Hello group, I am having troubles setting up a configuration where the customer wants to enable Anyconnect access to the network using their existing ASA, ACS and RSA. The customer wants to use the user database from his AD.The customer wants the ASA...

Hi, I am using ise captive portal for  authentication and it will redirect . The problem  is it is taking very long time  to once the user connected wireless . If i enable  tcpdump in the ise will give any insight to this problem . I don't where to s...

Dear All, I found this cisco document, that explain how to configure Asa to work with LDP to assign a Group Policy at the Login. http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98634-asa-ldap-group-pol....

Dear all, I’ve configured a web authentication through ISE. And the session timeout value are 4 hours on the 5760 WLC and re-authentication timer value are 12 hours on the ISE. Now an user passes the authentication and connects to wireless when first...

Hi! Does anyone have documentation regarding blacklisting after a supplicant fails the authentication and posturing put in place? Will it be port-based, or will a supplicant be able to plug into another switch port and begin the EAP authentication ...

Hi! Would like to have a single user have full control of administrative rights for the ISE server and then have another category where someone else has limited ability to enforce policy for sponsoring, new-user onboarding and whitelisting. The crit...

Dear Colleagues,We have an opportunity in UK. Public Sector where the customer wishes to “lease” parts of its switch stacks (some ports on their switch stacks) to another government organization.Ideally they would use their own ISE deployments if it ...