Network Access Control

Hello, I want to get all users / mac-adresses which haven't connected to out network since 180 days.How can I query that?The report "Dormant Users" dont seems to be the right way: it displays current associated users which are inactive...How can I pu...

Dear guys, I configured an guest portal for self-service guest registration. In my lab case, when a guest access to the network, authenticate & authorize base on my ise policy, then will be redirect to guest portal. But, when guest click on "Don't ha...

Hi, Recently i migrated from ACS 4.2 ( in windows) to ACS 5.4 ( in sns 3415) using Migration utility.  It was smooth migration, everything works except the log files in the .csv format were not migrated.Please help me on how to migrate the log files....

Hello Everyone,So, for AAA Authorization,When I issue : aaa authorization commands 15 default local. -> It will authorize every command on the exec for lvl 15.The command above will overlap the: aaa authorization config-commands. ?! I should use : aa...

Hii enabled machine authentication for windows machine but i have some MAC OSX laptop that authenticate with MS AD that i need to exclude form MAR , i tried to apply specific auhz policy but every time it fails because of MAR  , any idea ?  

Hello, I would like to create a condition that would force MAB'd clients to hit a certain policy set if their MAC address matches one in an endpoint identity group? Is this possible? I feel like a condition can be created using a combination of attri...

I'm trying to move AAA services from an ACS 4.2 integrated to AD to an ISE3355 supporting remote access VPN on an ASA/AnyConnect and wireless (PEAP). The ISE3355 is AD integrated.With respect to Remote Access VPN using AAA on the ACS, I currently map...

Hi,I have an SSID, which required mac filtering as first level of security and Radius authentication also. I have done necessary configuration in  ACS and WLC. In ACS, the rule for MAC filtering is taking a hit, but the users are not asked for creden...

Guys,I try to update the client provisioning from cisco.com but it failed (print screen can see in attachment). I try from Cisco ISE, it can ping www.cisco.com.Do you have any idea ?

 Hello All , i have to install Cisco ISE 1.2 on VMware (ucs server C22 M3) , i was searching for OVA file but no luck . can any send me the link to download the same . thanks .

 Hi, Is there any option to bind a user who is authorized correctly from external identity with the mac-address of his workstation ?The point is to give him access to the network only from a specific Workstation and denied him from any other workstat...

After the upgrade from version 5.1 to 5.3 does not start the process of view-logprocessor. The update process went without error. Please, help me. #-----------------------------------------------------------------show application status acsACS role: ...

Hi,Win server 2012R2 is not offically on the supported list for Contex Directory Agent ( CDA  ) , anyone tested this setup ?I have been following the Installation guide for 2012 : http://www.cisco.com/en/US/docs/security/ibf/cda_10/Install_Config_gui...