Network Access Control

Hi All,Just started installation of ACS 5.4 & integrated it with AD.My AD tree is very big & DL search from Acs 5.4 take longer time , sometime 5-8 mins for one DL or sometimes it times out.Is their any way we can optimise AD search using internal se...

Our ISE Deployment for wireless only is operating on 1.2.0.899 Patch 3.  We are looking to upgrade to Patch 8.  We plan on testing in a Dev envioronment first, but I was curious what others experience had been with stability in Patch 8?

Anyone have a link to instructions on how to upgrade ISE 1.2 (patch 8) to 1.2.1? The release notes don't mention a new process and the old process gives a SHA error.

After implementing TACACS, one of our routers takes about 8 seconds to response to any CLI command. We have no problems with other devices in the same location with the same AAA configuration. The router is talking to the ACS server (ACS 5.3) and the...

Hi guys,We are testing out ISE1.2 in the lab and are trying to achieve posture compliance assessment and remediation of Windows security patches with Windows clients running the SCCM Agent with SCCM 2012 infrastructure.Can you confirm whether support...

Hello, both server are working ok and they can ping each other, but when I try to add CAS into CAM it says:Failed to add server: Could not connect to 10.10.20.100     Any idea what this problem could be? Regards,

Has anyone had an issue with the advanced eval license triggering the below alerts after a full base license has been installed and the advanced eval license has expired?How can I keep the license expiration warnings and avoid receiving warnings for ...

interface FastEthernet1/0/47 switchport access vlan 4 switchport mode access switchport voice vlan 69 authentication control-direction in authentication event fail action next-method authentication event no-response action authorize vlan 100 authenti...

IOS version c3640-jk9o3s-mz.123-8.T11.bin.I am using Cisco ACS 4.1 and RSA SecurID version 6.1 integration. I use tacacsfor managing a Cisco 3640 router:This is my configuration:C3640#sh run | i aaaaaa new-modelaaa authentication login notac noneaaa...

Hi guysJust wondering if this can be done:We have a RSA server and TACACS server, all working fine.We would like to put in 2 factor authentication using our RSA token to manage our ASA box.Now, I have got the 2 factor authentication working (tested i...

Have anyone come across of integrating this two together for the window security patch updates compliances ? Hoping for any guidances from you all if this able to work? If Yes, Please tell me how its works (as brief as possible :(  )as i could not fi...

ISE is standalone.ver 1.2Eval license.I have a number of Cisco IP phones profiled by DHCP probe and sitting in the Endpoint Identity Group "Cisco-IP-Phone" (dynamic not static).However when this is used in an Authorization Policy it never matches.Jus...