Network Access Control

Hi,I have ASA which I use for internet access and VPN gateway. I am trying to deploy ISE inline VPN node, but i found that the users traffic (from inside to internet) denied by the Inline node (users return traffic from untrusted port to trusted is b...

Hi folks,We're currently in the process of rolling out Anyconnect 4 with NAM and ISE agents to handle our 802.1x requirements. As part of this we're also interoperating with Anyconnect VPN on 5585-x firewalls to take advantage of the CoA on this plat...

Hi, We have a distributed ISE infrastructure version 1.3.We begin noticing the following problem.Randomly the PSN's started dropping radius requests.Basically they didn't serviced any client. It looked like this bug: ISE PSN rejecting RADIUS request;...

We are a small business of 700 users on 26 locations. We have two 1121 Appliances, and they're installed running ver 5.6. Both are standalone - primary. I am configuring a deployment for redundancy, and I found this article - http://www.cisco.com/c/e...

We had a situation where the DB was corrupted in the process of doing an ISE upgrade from 1.1.4 to 1.2. As a result of which the entire network was down.Is there a way to monitor DB health on regular basis just so as to avoid the above situation in f...

Hello ,Can anyone tell me, when Cisco will enable support for Inline-SGT on ASA firewalls ? Thanks,   

The ACS only displays the NAD IP-address in the log. I have registered all the NAD's in DNS, but there's no DNS-lookup on the NAD ip's. Is it possible to make the ACS use DNS name instead of IP when displaying the NAD's in the log?

Hi , I keep get this error when i try to download any client provisioning remote resource  java.net.SocketTimeoutException: Read timed out;WinSPWizard 1.0.0.43 The proxy settings have been changed , that did not make and difference . Thanks, Khaled

Hi all,Currently i'm using an ACS4.2 as radius server, some switch 2960-s ios 12.2.(55)se5, ipphone Alcatel iptouch 4018 and i would like to assign dinamic vlan to some specific users/laptop Daisy-chained to ip phone.Logic connection is:   users lapt...

Hi,I am trying to send the credentials of a guest user via sms, but does not work. I used the following parameters in configuration of the SMS gateway (ISE):http://admin:12345@192.168.71.11/cgi-bin/exec?cmd=api_queue_sms&username=admin&password=admin...

I'm in the middle of a migration from ACS 3.3 (Windows) to ACS 5.4, and I'm adding some Nexus 7Ks to add to the ACS 5.4.Previously, these 7Ks we're never on the ACS 3.3.  The reason, I was told, is because ACS 3.3 didn't support Nexus (NX-OS n7000-s2...

I am setting up guest wireless in my enterprise using Cisco ISE 1.3. I have set up Authorization profiles and Authentication conditions for Guest Wireless. I am however not sure of the Authentication results (the allowed protocol section). Since I wa...

I set up a trial version of an ACS server, put it in VMWare. I went through the whole set up process, ACS installed correctly but cannot ping anything from the ACS in my LAN (i chose 'bridged mode' in vmware). Is there anything else I should do? When...

We have guests that visit our office and connect to the Guest WiFi. We want to implement ISE for the self-sign in portal. That would help us determine the user and have them accept the legal terms without involving IT. When a guests logs in and surfs...

Hello, guys.I have ACS 5.4 and 2960 switch.I have configured aaa with tacacs.But every time I get error:13017 Received TACACS+ packet from unknown Network Device or AAA ClientBut I several times checked shared key on both sides and changed it, but no...