Network Access Control

When attempting to make a manual backup of the ACS configuration via Operations...Distributed System Management...Primary Instance...Backup the backup job never completes.I am using an SFTP Repository.I can see where the ACS connects to the SFTP repo...

When defining a software repository from CLI or GUI, I have not been able to define the custom port that our FTP server is listening on.  Does ACS support the use of custom ports for FTP?

We are using ACS for our Device Administration (Authentication and Authorization). Basically we are having HO & DR site with dual ACS working as Active/Standby. Currently my HO ACS is serving the customer and as per my configuration my HO ACS is the ...

We are trying to integrate our product(Cisco Prime Infrastructure) with Cisco ISE for Authentication and Authorizations. We already support PAP/CHAP, and not trying to add support for EAP-TLS.Currently during our integration, facing TLS payload error...

Hello All, I am trying to configure Posture validation on my Cisco ASA with Anyconnect. I have uploaded the host scan image and the CSD image on the firewall and enabled both.After i configure a Dynamic Access Policy (DAP) for checking if the system ...

I cannot find anything in the ISE user manual that describes the behaviour when a client fails authentication after a number of failed authentications,. Lab trials are somewhat inconclusive!Eg After 3 failed logins during a rolling 30 minute window I...

So we all know we can leverage identity groups in authorization policy, can we leverage two of them ? I tried building a compound condition that uses an identity group (MAB) along with another identity group (User) and can not get the policy to hit.....

Hi,I am working on lab setup where I installed ACS 5.2 I created new access service and used it in existing service selection rule (Rule-2) earlier but it didn't work. Later I created new service selection rule and applied new service access rule. Ho...

Ive scoured the forums for a solution but struck out looking for design tips. I have a centralized guest wireless using ISE with CWA on an anchor controller and it works great. Now I need to create wired guest network for my remote sites. Is this pos...

I have been investigating using CDA to get IP->User mapping, to allow us to write User/Group rules on the ASA firewalls.  My server engineers do not want to apply the patches and especially the registry changes on our domains controllers. We were als...

Hi Im setting up a ISE (1.3) in distributed deployment with a primary and secondary node.Both nodes are running admin and PSN role.The 2 nodes are up and running and synchronised, and now i want to set up a CWA guest solution. So my question is:In ca...

Hi there,I'm having intermittent issues with onboarding endpoints (both wired and wireless) with ISE 1.2 (Patch 12).I get three differing scenarios upon attempting:1). I get redirected to the ISE Self Registration Portal, register, download the suppl...