Network Access Control

EAP-TLS is using for machine authentication with Cisco ISE and 802.1X. The root certificate that signed the client certificates is about to expire. I understand we can just add the new root certificate in the trusted store of the ISE servers, but how...

Hi,we have 802.1x implemented with machine and user auth. We also use dynamic VLAN assignment. Our client is AnyConnect 3.1. Operating system is Windows 7. With Windows XP, it works just fine.When we try to connect to the 802.1x auth desktop with RDP...

Hi All, I am constructing Posture conditions in ISE, which check  Windows Update are not more than 7 days old. Can you guys help me in formulating this condition. Thanking in advance, Thank You,Aditya

I have a client with an existing ACS 4.2 install base. In their configuration they have several ACS administrators configured so that they are only allowed to add / edit users in a particular group. The control is defined under Administration Control...

My customer is experiencing intermittent VPN issues in which the NAC agent will not pop-up upon connecting to the VPN.  It works fine on the LAN however.  The problem is not experienced by everyone.  for example, it never happens to me, and has never...

Hello,We are currently having an issue with ACS when using PKI authentication with a Alcatel SR router. The following error occurs:Evaluating Service Selection Policy15004  Matched rule15012  Selected Access Service - Test Service - Radius11021  RADI...

Hi Experts, ISE 1.2.1.198 It is possible to use two different local certificates on cisco ISE, generated by two different root CA, for EAP? Example:1 - Microsoft CA for notebooks2 - Different CA (public, openssl, other) for mobiles And, in case it is...

Hi everyone,I'm a beginner with cisco ISE, and I have a very special case that may occur frequently in my situation ... In normal case, the client exchanges EAP messages with the switch, and the switch acts as a proxy server regarding the ISE server....

I have 6 inter-connected ACS appliances used for RADIUS authentication of wireless users. Currently they are running v5.4 and need to upgrade to v5.5. It would be difficult to upgrade them at the same time since they are in different regions in the w...

Hi, You can move the CA certificates from my server windows  server 2003 to  a Cisco router?I currently have a Windows 2003 server CA (SCEP)  and need to move certificates from this machine to a cisco 2900 router (ISR) ... Is it possible?

Hello,I would like to integrate RSA SecurID to our current setup as a second factor authentication. I can authenticate with AD and RSA individually but not on the same authentication sequence.The scenario include the Anyconnect VPN where the user is ...