Network Access Control

I have a situation where a bunch of users passwords expired in AD.  There are several machines that users are logged into with their old passwords, which is causing authentication failures (failure reason code 24408).  These log messages are occurrin...

Cisco Secure ACS v5.6.0.22Internal Build ID: B.225 I cannot save certain changes to ACS. I have tried I.E.11 v11.0.17 (KB3032359) as well as FF v36.0.1. I cannot move a users' downloadable ACL to a new downloadable ACL. I make the change and hit subm...

EAP-TLS is using for machine authentication with Cisco ISE and 802.1X. The root certificate that signed the client certificates is about to expire. I understand we can just add the new root certificate in the trusted store of the ISE servers, but how...

Hi,we have 802.1x implemented with machine and user auth. We also use dynamic VLAN assignment. Our client is AnyConnect 3.1. Operating system is Windows 7. With Windows XP, it works just fine.When we try to connect to the 802.1x auth desktop with RDP...

Hi All, I am constructing Posture conditions in ISE, which check  Windows Update are not more than 7 days old. Can you guys help me in formulating this condition. Thanking in advance, Thank You,Aditya

I have a client with an existing ACS 4.2 install base. In their configuration they have several ACS administrators configured so that they are only allowed to add / edit users in a particular group. The control is defined under Administration Control...

My customer is experiencing intermittent VPN issues in which the NAC agent will not pop-up upon connecting to the VPN.  It works fine on the LAN however.  The problem is not experienced by everyone.  for example, it never happens to me, and has never...

Hello,We are currently having an issue with ACS when using PKI authentication with a Alcatel SR router. The following error occurs:Evaluating Service Selection Policy15004  Matched rule15012  Selected Access Service - Test Service - Radius11021  RADI...

Hi Experts, ISE 1.2.1.198 It is possible to use two different local certificates on cisco ISE, generated by two different root CA, for EAP? Example:1 - Microsoft CA for notebooks2 - Different CA (public, openssl, other) for mobiles And, in case it is...

Hi everyone,I'm a beginner with cisco ISE, and I have a very special case that may occur frequently in my situation ... In normal case, the client exchanges EAP messages with the switch, and the switch acts as a proxy server regarding the ISE server....

I have 6 inter-connected ACS appliances used for RADIUS authentication of wireless users. Currently they are running v5.4 and need to upgrade to v5.5. It would be difficult to upgrade them at the same time since they are in different regions in the w...