Network Access Control

Hello Community, i want to know, if its possible to check with Cisco ISE if a ccmputer account in active directory is set enabled/disabled.We got an authorization aolicy working and want to add a check, that just enabled computer accounts in the acti...

I am trying to test an access policy in ACS 5.3, but I am unable to find how to use the new policy with a specific switch.  This is a live system and I cannot modify the "default device admin" policy until the new one is tested.I suspect it is a conf...

I'm migrating a Cisco ACS 5.4 Cisco ISE 1.2.1, I am creating a Profile Authorization to allow access L2TP VPN using 128-bit MPPE.I have 2 attributes called MS-MPPE-Encryption-Policy and MS-MPPE-Encryption-Types in the ACS and I can choose values smoo...

Hi to all,is there any way to selective restore items from an acs backup file?I need to restore an primary ACS 5.3 configuration to a new  ACS running 5.6 in order to do some tests before upgrading to 5.4 and then 5.6 but I need to be sure that distr...

Hello! I am currently using the open source TACACS+ server called "tac_plus" for Linux distributions. I have configured the configuration file correctly, I am able to log into ASDM using the one of the account's credentials created without an issue w...

Hi all, I am planning to add an additional node to an existing standalone ISE. I am however unsureabout the creation of the certificates. At the moment I am using a Thawte SAN windcard certificateon the primary host. The current host is located in a ...

HiI would like to find out if one can change the domain of the ISE to another domain after ISE has fully been implemented or do i have to rebuild the server again. ise version is 1.1.1i would like to change from xyz.abc.com to just abc.comthanks

Hi, Has anyone faced the below issue while doing backup.? I found that it was documented in a bug and shown as fixed but still getting even with patch 2https://tools.cisco.com/bugsearch/bug/CSCuq63732/?referring_site=bugquickviewclick Sun May 24 10:4...

Hi All,Can we able to create an admin username and password with role admin in the cli.I have access to the cli using a user account and I was trying to create an admin username and password.I have created one but i cannot access using those credenti...

I have below config on switch (C2960S-UNIVERSALK9-M), Version 15.0(2)SE7,aaa group server tacacs+ testgroup server name test1 server name test2 server name test3tacacs server test1 address ipv4 192.1.1.1 key 7 testkey timeout 3 single-connectionSimil...

Hello,say I want to have five ISE 1.3 nodes behind load balancer, I want only only G0 behind LB, and G1 interfaces will be dedicated for certain things. Specifically I want to use G1 interface for Redirected Web Portal access (could be CWA, device re...

Hi everybody;I read Cisco Trustsec document and want to ask some questions: 1. as I understand, in Cisco TrustSec domain we need to have at least one authenticator device at anytime. if we have just 1 switch in the network, it will act as authenticat...

Hi, It is neccesary configure IPEP if we dont want posture into vpn remote users? I know that IPEP works with Cisco ASA for VPN posture assessment , so the question is what about VPN concentrator StoneGate ?Has anyone tested IPEP inline posture with ...

This is an opportunity to learn and ask questions about how to configure and troubleshoot the new Cisco Secure Access Control System (ACS) 5 Installation. Ask questions from Monday, May 11th, 2015 to Friday, May 22, 2015Javier Henderson has been a cu...