Network Access Control

Hi Experts, Due to some suspected recent policy implementation/changes on 5525 ASA , same is not getting autheticate on TACACs (ACS) However we are getting prompt for username/password. We also have local username/password, through which we are able ...

Hi,  We would like to connect our corporate tablets and mobile devices to a restricted network - without implementing classic BYOD features like  self-provisioning but with certificate based only authentication (EAP-TLS). (Our Helpdesk will handle th...

Hello, I'm currently on the first phases of deploying a Cisco IPT 802.1X based proof of concept using freeradius, Cisco switching infrastructure (4500's).The requirements are to use EAP-TLS authentication for the phones, and freeradius as Radius Serv...

Hello all, I face that error when NAC find the kaspersky is not updated and try to automatic update it. The remediation you are attempting has reported an internal error. If this problem persists please contact your system administrator so anyone kno...

I'm working on bringing an "ask the expert" program to you where you can chat, in the community forums, directly with a Cisco expert about a designated topic for a set period of time (24-48 hours or so).  Right now I want to collect your ideas for to...

Hi I configured my firewall for authenticaitona and authorization. I could login via telent/console with AD username & password but I could not do any command exces. (ie.sh run, conf t etc) and I get following errorallback authorization. Username 'xx...

Hi,I have configure the ASA with AAA. It was doing the AAA authentication but as soon I have enter the command “aaa authorization command TACACS+ LOCAL”, I am able to login, but unable to run “show run, conf t, ping” commands. When I enter these comm...

Running Cisco Secure ACS version 5.6, we encounter the following problem. ACS sends me the following message: Cisco Secure ACS - Alarm NotificationSeverity: Warning  Alarm NameSystem Alarm [Database Purging]Cause/TriggerThe number of incoming log mes...

So we have been running tacacs.net for a while and I have all my granular control I need for Switches, Routers and ASAs but we want to add WLCs to the list of devices we are using this for. I know it has to do with <Services> section of the authoriza...

Hi, We have an issue where newly created users are getting "Command authorization failed" when trying to do anything. When we looked at the ACS, we see in the Authorization report "13025 Command failed to match a Permit rule" What we also noticed is ...

I have several 2960's running 12.2(5x)SE. I have tacacs configured exactly the same way and yet on a few, I can't get it to work. I feel that the switch is simply not sending out tacacs traffic. Here is some output for your digestion:AAAAAA#sh run | ...

Hi all,We having been getting reports of a handful of users not getting the Cisco NAC agent pop up window after installing the latest Microsoft July updates.  Has anyone else seen this behavior? The users use the following: NAC Agent: 4.9.4.3Cisco IS...

Hi All,Lately I installed NAC agent on 800 PC's around our campus through SCCM and we saw that some users did not receive the NAC agent completely.I means that one directory is Missing and the XML files as well are missing. NACAgentCFG.xml and NACAge...

Hi all, I have a ISE deployment with posture validation that works fine but i have a problem with the Cisco NAC Agent Installed on windows 8.1 professional machines (64bit). The wired 802.1x authentication works fine, the endpoint is authenticated su...