Network Access Control

Hi Guys, need your input for Cisco ISE 1.3 Public SSL Wild card certificate for guest services.When i generated the CSR for guest services using wild card certificate, there is no issue coming in importing the certificate to the ISE. When we see the ...

Hi all,in my test environment i have one cisco ise with one wlc 5508 and 1600 aps. I try to test/verify wireless 802.1x eap-tls, but on user authentication with windows 7 i receive (on desktop) on right bottom icon the statement "netxx not authentica...

Has anyone deployed Cisco TrustSec and SGACL to control east/west traffic flows? If so do SGACLs have similar design constraints regarding the number of ACEs, as dACLs? I'm reading the Cisco TrustSec Overview Guide dated Jan 2014 that recommends a ma...

When changing the log collector in an ACS 5.6 distributed deployment, what happens to the existing logs on the old log collector?  I have two ACS, a primary+log collector, and a secondary.  If I change the log collector from primary to secondary I ca...

Hey all, What are some opinions on ACS 5.x , what version is the most stable?  I was use to using 4.x ACS and it working as well as not not giving us problems at all, but clearly that is not the case with version 5.x;  you breath wrong and 5.x has so...

The Cisco Secure Access Control System 1121 has an EoL notice that defines Aug 2014 as End of Software Maintenance Releases Date: HW.  Does this mean that any security vulnerabilties found after this date will not be fixed 

Hi all.I'm having a very tough time with a couple of sponsor users getting logged into the sponsor portal. We have a very limited role, where we permit "Domain Users" to get in and create short guest accounts. It works pretty much across the board. H...

HiDoes anybody know a way how to filter within an ACS 5.2 rule on the certificate issuer CN within the certificate dictionary condition?I want to allow only certificates from a specific subordinate CA to access a specific resource.

Hi All,   I have a client he has two data vlan's 100,101. He doesnt want to segregate the user type, But he wants that if user connects to any of the WLC in the enviorment, He should be connected to any  data VLAN's. On ISE, I can create rule, based ...

I am running Cisco ACS( Version : 5.4.0.46.0a)  802.1x with certificate based authentication for Wired connections. the issus is i found some authentication failed messages in some switch port. when I troubleshooting in ACS, it is an error: "22056 Su...