Network Access Control

AAA Authorization with RADIUS and RSA SecurID Authentication Manager

Hi there.I am in the process of implementing a new RSA SecurID deployment, and unfortunately the bulk of the IOS devices here do not support native SecurID (SDI) protocol. With the older RSA SecurID deployment version, it supported TACACS running on ...

ACS Medium Deployment

I´m trying to make a medium ACS deployment and for that I have to add 2 new ACSs to the cluster. The ones I have already are version 5.3 and the new ones would be 5.5. Do I need to upgrade the older ACS so they can work as a cluster? Or it can be imp...

Resolved! Accounting on ACS 3.3, doesn't seem to be working.

Hi Guys,I have following 6 lines configured on our Cisco gears, switches, router & ASA.However our ACS 3.3 ver does not seems to be capturing commands used by CLI users.123456aaa authentication login default group tacacs+ localaaa authentication logi...

ISE 1.2.1.198 Wired - Central WebAuth Fail

Hello, I have a trouble with WebAuth.I follow this guide to implement this, but it does not work.http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/113362-config-web-auth-ise-00.html Port Redirection is working, because when ...

Cannot apply patch 5-2-0-26-4 to ACS

Anyone else getting this error?Failed to install '5-2-0-26-4' - please open the patch using 'validate' firstI get that after a few other warnings:/opt/CSCOacs/mgmt/cli/bin/patch-wrapper.sh: line 129: cd: 5-2-0-26-4: Not a directorymv: `/opt/CSCOacs/p...

Cisco Identity Services Engine Field Engineer ... How I need to renew ?

Two years ago I did two exams, 650-473 (now retired) and 650-474 ...What exams I need to do to renew my "specialization" ?I need to do 500-254 ISE and repeat 650-474?I know my current specialization is valid until October 15thRegards.

N7K Authorization with IBM AIX Tacacs+

Hi ExpertsOur cust tried to configure AAA between N7K and AIX Tacacs+ server.Authentication worked well with the server and they added a authorization configuration for controlling user authorization.However they couldn't get a access user role confi...

client rejected ISE certificate

when i try to authenticate PC i receive this error .."PEAP failed SSL/TLS handshake because the client rejected the ISE local-certificate" any advise will he help full

Resolved! ISE Self Registration life time registered endpoints

is there a possibility to set a specific life time to registered endpoints so users need to reregister their device for example every week, month or whatever is applicable? I’ve seen solutions (non-cisco) where this was possible.

Session Conditions ACS 5.4

Hi, I have a user that I want to limit to a time range. I created a Session Condition for Date and Timebut I see no way to attach it to the particular user. Can anyone help with the process? Thanks,Jim

ISE and Microsoft System Center Endpoint Protection AV Posture Issues

We are deploying an Enterprise ISE Infrastructure. The Customer has adopted Microsoft System Center Endpoint Protection ver 4.x as its approved AV. NAC Agent detects the AV. It however has issues detecting the Definition Files.See Log File below:"772...

Resolved! ACL--- ISE

Hi Team!! in ISE , Can a static acl be applied dynamically to a switch interface, i.e. if a port on a switch, which is allocated to a printer, becomes active but no certificate is received on the ISE, then the ISE will push an ACL to the switch ...

Resolved! NIC config on ISE 3395

Hi, I've read that the 3400-series is running Shared LOM in active/active. Does that mean that it will loadbalance the traffic between the two NICs?Does the 3300-series have the same feature? Regads,Philip