Network Access Control

Hi all,my issue is different to the usual admin account lock out.we have two ise's, primary admin and secondary admin. The admin CLI password works for the secondary ISE but it does not work for the primary ISE.so, i wanted to shutdown the primary IS...

Hi dears,I have 2 physically Cisco ACS model. I want to deploy one of them is Primary and other one is secondary. How i configurate this deployment?? must I be assign each ACS different ip adddress?? what about the license??THANKS.

We are looking at setting up dot1x in our libraries however I have been asked to see if there is a way to force a switch port to require machine auth before user auth.  The reason for this is a problem we have that users will disconnect the ethernet ...

Hi All,I want to allow one vpn user to access vpn based on his public IP. For example if user access vpn from 1.1.1.1 then only he should be able to connect to vpn.I created network authorization profile under access policies as belowsystemuser=vpnus...

I upgraded from ACS 5.4 to ACS 5.5 about a month ago and just using ACS for TACACS only. After the upgrade on the primary and secondary, I stopped seeing anything in the logs as far as passed and failed TACACS attempts. The weird thing is that the pr...

I understand that there is a migration tool that can help upgrade ACS 4.2 on windows platform to 5.5 apliance. However, it does not support certificate migration.Customer is using client certificate for wireless client authentication. Does that mean ...

I am running ISE version 1.2,0,899, agnet 4.9.4.3. When the windows 8 connects with the NAC agent I get a compliant message on the windows box, but I am not getting an 802.1x authentication. After about 10 minutes the windows box will pass the 802.1x...

Hi dears,I have 2 physical Cisco ISE devices. I want to deploy high availability. So I want to know that how many license needed? Do I need two seperate license for each devices??Thanks.

Has anyone successfully profiled an Xbox ONE? I have the Xbox 360 working well, but the ONE doesn't even get recognized as a Microsoft device by ISE. Thanks.

Hello everyone,Does anyone know if it is all possible to disable port 80 but yet keep 443 running on the ACS 5.5 build?  Thanks

Dear Experts,Does ACS support Radius Single Sign On by forwarding accounting message (port 1813) to 3rd party device?Thanks & regards,Ben

Hi all,i have cisco 1120 appliance. its not a production appliance newly come. So i directly install ACS 5.5 in it. Everything was working fine but when i restart this server nothing is coming evene to console. It only show the initial booting proces...

Dear all,Presently, we are testing 802.1x using Cisco ACS 5.4 and Cisco Anyconnect v3.1 as 802.1x supplicant. We have created predefined NAM profiles (with Cisco Profile Editor) and applied as default in on our test machine. We are using PEAP (MsCHAP...

Hi I am trying to implement TACACS authentication against our internal database on the ACS 5.1 for access to our wlc 5508. I have configured the WLC 5508 to use the TACACS which is configured to point our ACS. In the ACS I have configured the relevan...