Network Access Control

Hi allI am presently deploying NAC around a number of branch offices for a customer with Cisco ISE as the backend RADIUS server. I am working with a mix of cat6ks (sup32/IOS12.2(33)SXJ7) and cat3750/3750Es (IOS 12.2(55)SE9/15.0(2)SE6) and part of the...

I'm running ACS acs-5.4.0.46-B.221 and I found suspicious log entries. The issue is that IP address logged in logfile has reverted all octets.Logged Remote-Address=Z.Y.X.W instead of Logged Remote-Address=W.X.Y.Z. Is it known bug or not? These supisc...

Dears,          We upgraded from 1.2.1 to 1.3 but many users can't get posture assessment and then stuck in quarantine state. Any help

Hi everybody, I have an ACS 5.5 view server running 5.5 patch 4. I have quite a large deployment, so the database is purged on a regular basis. I noticed that when I or other users create favorite reports these reports disappear after the DB purge. I...

HelloI'm trying to generate a CSR on a secondary ACS 5.4.0.46.6 node. When I do this I get the following error This System Failure occurred: Error while remotely calling Primary to create:com.cisco.nm.acs.im.certificate.CertificateRequest Object{ req...

Hi, I have a Lab setup with ISE 1.3, WLC 5508 7.6.130.0. I have setup the ISE using Setup Assistant as a base point and have managed to get a couple of things working, such as the Guest Portal with Self Registration, standard Wireless dot1x authentic...

I am trying to connect Cisco Context Directory Agent to my AD 2012r2 server,Went through the setup guide and changed all needed register keys, firewall rules, DOCOM and wmimgmt permissions,I got passed the access denied error, but now I am getting a ...

Hello, I want to know  does ISE with Plus-License support  TrustSec features ?     On the TrustSec 5.0 document, it is mentioned that you must have ISE Advance-License for TrustSec support. but  on other-hand on ISE Licensing-datasheet it is written ...

Dear all, Let's say you make two users "bob" and "peter".Bob has an privilege level of 15 and peter of 1.So I do:username bob privilege 15 secret 0 bob-and-username peter privilege 1 secret 0 peter Now when I hit "show run" I see:username bob secret ...

Hi, Very often, when we integrate ISE with customer AD and try to join ISE into domains, customer will ask what kind of service account they'll create for us to use to join the domain.  Based on Cisco documentation, the service account should allow I...

(X-posting as I mistakenly posted in the wrong forum)We are in the middle of an 802.1x deployment with Cisco ISE as the backend. We have been using Anyconnect NAM as supplicant.Everything is working famously on physical hosts, but we apparently have ...

Hi Guys,We have the following problem. Our customer has the following equipmentDell Latiude E7440 and Targus Docking stations (ACP70EU). On every workplace is a dockingstation, now the Dell machine connects to the dockingstation and a new network ada...

Hello,We are currently using 8 character Tacacs Server Key to authenticate devices in the Network.Our Plan is to migrate 8 char to 12 char. But I am not sure the Hardware/Software limitation of various devices in the Network to support this migration...

Hi,Just a question on ISE license consumption.If a user logs in and gets authenticated (user authentication) via ISE on a device that is already authenticated (device authentication), does it consume 2 licenses, one for the device and one for the use...