Network Access Control

Hello Expert, I just running Cisco ACS 5.2 in test system. I removed all default service selection rules, and then I create a new rule by myself. But I try to log on router, the ACS display that the action is matched with the Rule-2. I have no idea w...

Is it possible to authenticate the ISE administrator via an external Radius Server? The option I find is that it will not work,  The manual reads: In Cisco ISE, you can authenticate administrators via an external identity store such as Active Directo...

Hi,I have ASA which I use for internet access and VPN gateway. I am trying to deploy ISE inline VPN node, but i found that the users traffic (from inside to internet) denied by the Inline node (users return traffic from untrusted port to trusted is b...

Hi folks,We're currently in the process of rolling out Anyconnect 4 with NAM and ISE agents to handle our 802.1x requirements. As part of this we're also interoperating with Anyconnect VPN on 5585-x firewalls to take advantage of the CoA on this plat...

Hi, We have a distributed ISE infrastructure version 1.3.We begin noticing the following problem.Randomly the PSN's started dropping radius requests.Basically they didn't serviced any client. It looked like this bug: ISE PSN rejecting RADIUS request;...

We are a small business of 700 users on 26 locations. We have two 1121 Appliances, and they're installed running ver 5.6. Both are standalone - primary. I am configuring a deployment for redundancy, and I found this article - http://www.cisco.com/c/e...

We had a situation where the DB was corrupted in the process of doing an ISE upgrade from 1.1.4 to 1.2. As a result of which the entire network was down.Is there a way to monitor DB health on regular basis just so as to avoid the above situation in f...

Hello ,Can anyone tell me, when Cisco will enable support for Inline-SGT on ASA firewalls ? Thanks,   

The ACS only displays the NAD IP-address in the log. I have registered all the NAD's in DNS, but there's no DNS-lookup on the NAD ip's. Is it possible to make the ACS use DNS name instead of IP when displaying the NAD's in the log?

Hi , I keep get this error when i try to download any client provisioning remote resource  java.net.SocketTimeoutException: Read timed out;WinSPWizard 1.0.0.43 The proxy settings have been changed , that did not make and difference . Thanks, Khaled

Hi all,Currently i'm using an ACS4.2 as radius server, some switch 2960-s ios 12.2.(55)se5, ipphone Alcatel iptouch 4018 and i would like to assign dinamic vlan to some specific users/laptop Daisy-chained to ip phone.Logic connection is:   users lapt...

Hi,I am trying to send the credentials of a guest user via sms, but does not work. I used the following parameters in configuration of the SMS gateway (ISE):http://admin:12345@192.168.71.11/cgi-bin/exec?cmd=api_queue_sms&username=admin&password=admin...

I'm in the middle of a migration from ACS 3.3 (Windows) to ACS 5.4, and I'm adding some Nexus 7Ks to add to the ACS 5.4.Previously, these 7Ks we're never on the ACS 3.3.  The reason, I was told, is because ACS 3.3 didn't support Nexus (NX-OS n7000-s2...

I am setting up guest wireless in my enterprise using Cisco ISE 1.3. I have set up Authorization profiles and Authentication conditions for Guest Wireless. I am however not sure of the Authentication results (the allowed protocol section). Since I wa...

I set up a trial version of an ACS server, put it in VMWare. I went through the whole set up process, ACS installed correctly but cannot ping anything from the ACS in my LAN (i chose 'bridged mode' in vmware). Is there anything else I should do? When...