Network Access Control

I am currently testing ISE 1.3 in our Lab enviroment.  On our production 1.2 cluster I had an issue with Macs connecting to our dot1x enabled SSIDs where the endpoint would get an error just after connnecting, before posturing takes place, and then a...

Dear All,I am already having ISE in distributed deployment as1)Primary Admin node2)Primary Monitor node3)PSNNow i have 3 more ISE boxes & i need to build secondary cluster.1) Secondary Admin node2) Secondary Monitor node3) PSNTo do this what all prer...

Hi there: Anyone know if there are a way to install the ISE NAC agent in a silent mode other than use MS groups policies?Thanks in advance. Al 

Dear Folks,Kindly suggest the list of all possible Hot-Fixes required for the Cisco ISE EAP-TLS solution... We have applied 9 HotFixes so far. But, still the connectivity is intermittent. Is there any list for all applicable Hot-Fixes?OS = Win 7 SP1 ...

EnvironmentISE 1.1.2As already stated in other posts in this forum, it appears there is a kind of limitation when configuring SMS Notification options via the ISE GUI interface under the "Administration ==> Web Portal Management ==> Settings ==> Spon...

Hi,I am using a 2811 for VPN clients, and have instituted AAA using a windows radius server. How can I encrypt the traffic between the 2811 and the radius server when it is authenticating the users? I am pretty sure it is using PAP now. Can I enforce...

I have been trying to get TACACS authentication setup for my Fortigate webfilters and analyzers however I am missing the attributes to set the match conditions for the users who log in with the AD credentials to assign them the correct user profile t...

Hi, I want to implement 802.1X authentication on Cisco 4507 switch. Authentication should be done thru Microsoft Active directory. Can someone guide me in this regard? Thanks

I'm very much a novice with ACS. I want to have ACS send it's RADIUS authentication data to a separate syslog server, but need to determine the capacity. Is there a way to determine the amount (in bytes) of RADIUS authentication data that ACS collect...

Hi,I cant seem to find any definitive answer regarding ISE software ordering in a HA deployment scenarioIf i'm proposing a HA ISE running on the secure network server (SNS-3495-K9) am i required to order the ISE software (SW-3495-ISE-K9)_ for both pr...

Hi, Quick question to ISE development team:Will the fix for CSCuj97832 be included in a future patch of ISE 1.2.0?If yes, is there an ETA?If no, can you please briefly explain the reasons? Kind regards,peter

Dearshi  i would like to ask you if we can restrict wireless users to be authenticated from 3 devices only via ACS. currently wireless users are authenticated via MSCHAPv2 PEAP from local ACS database. but we have a request that user can be authentic...

Hi All, kindly help me to integrate  Cisco ACS5.6 to AD. Now I am migrating Cisco ACS4.2 to 5.6.What type of Account & should be created in Windows AD for the integration. Whether this account should support 128 Bit password.Also the user should be u...

Hello, Is it possible for our security team to security scan all hosts on the network if they are using 802.1x authentication? I am trying to ensure that we can meet security scanning requirements and still use the 802.1x port-based authentication fu...