Network Access Control

We have setup Wireless certificate authentication using ACS 5.3. It uses a stand alone certificate chain and all certificates were installed and correctly setup on the ACS. We have rules setup that look for a specific common name in the User personal...

Hi everybody,I am just wondering if anyone knows how perform compliance module on a new ISE installation to get the AV and AS updates, while the ISE is "offline", (not connected to Cisco/Internet). The ISE has Advance Service license, but the custome...

Im wondering if there is any way of scheduling a Shared or Favourite Report in ACS 5.5 ?. It looks like the only scheduled reports you can run are thedefault TACACS_Authent,Account,Author Radius_Authent,Account. I would Love to be able to automatical...

I have just been patching out ACS 1121 on Ver 5.3 in preparation for upgrading to 5.5 however having successfully patched the secondary server I tried to promote this to the Primary and this seemed to fail with no error message.A reboot of the Second...

Hi,I'm hoping to get some insight into a problem with guest authentications we are currently experiencing.  First of all, we running ISE version 1.2 patch 5.The problem seems to be triggered by a guest user forgetting his password and locking out his...

Hello guys,I've been struggling with this matter for a few hours and I cannot see a way out.The idea is to check the identity of a Cisco router through its RSA fingerprint during an SSH connection:I've done the following steps: 1) Configuring the key...

Hi all,I have come across an issue upgrading from ACS 5.4 to 5.5 using ACS 5.5 Application Upgrade Package (ACS_5.5.0.46.tar.gz). The upgrade fails with the error % Manifest file not found in the bundle.My remote repository is an FTP server (which I ...

Greetings. Just upgraded ACS 5.2 to 5.4 via SFTP and attempted to apply patch 5 but get error message "SSH connect error". Same SFTP server as used for the upgrade, so assumed the credentials had been removed in the upgrade process. Re-configured SFT...

Hi All,I have upgraded to ACS 5.5 patch 6, but having strange issues.Though the incremental backup is configured, it is sending an alert as "Incremental backup is not configured. Configuring incremental backup is necessary to make the database purge ...

Does anyone have a baseline of privileges needed for their NOC? I know business requirements are different but looking for a place to start. We would like them to be able to do their jobs plus some extra break fix stuff.

I have a ACS 3.2 and a router 2811 tried to authenticated it. When i put a debug tacacs the router displays "write to 192.168.241.200 failed with errno 257((ENOTCONN))" the connectivity is ok but the request doesn´t arrive to acs, the other devices w...

Hi,I'm configuring a new ACS5.4 appliance from scratch. My previous ACS was a 3.3 Windows system so we decided to redesign the configuration.  You can imagine that the new ACS is very different to me.My question is what is the best approach to settin...

Hello, I have a user who has intermittent NAC login issues - once or twice a month.  It just occurred today.  How can I view the root cause for his login failure in NAC? Adil