Network Access Control

Hi,1. I wanted to know what would be the recommended subject identifier that should be used in Certificate authentication profile when doing EAP TLS with Active Directory - CA.  2. I am trying to use Subject - DNS Name but when issuing Certificate fo...

Before I ask the question, let me explain our environment.We have an internal 5508 controller.  We also have a 5508 DMZ controller that acts as an anchor controller.  Guest traffic is piped to the DMZ controller which provides the DHCP address, and D...

i installed the primary and secondary server.i see only one problem in the logs.when i try to replicate i get this :cisco acs 01/04/2012 23:50:58 NTVMEM73 INFO Outbound replication cycle starting...01/04/2012 23:40:25 NTVMEM73 INFO Outbound replicati...

Hello,I want to comply all the domain computer with latest windows Patch Installed. How we can create this condition under which catagry as mentioned below?Thanks.  

why there is one hour time drift on Cisco ACS

the cisco NAC web agent can't detect AV (system center endpoint protection) is updated although it is updated.by troubleshooting , it seems it is related to Windows 8.1 as i tested the same AV on another machine Windows 7 and it is working.any body f...

Having issues getting "aaa authorization commands radius" working in ACS 5.5 for a simple deny or permit statement. I have the Vendor VSA configured as in 4.2 but cannot get this working correctly on 5.5. Anyone have this issue or can provide insight...

In the process of integrating ISE 1.2 into our environment with the eventual intent to replace ACS 5.x and having a challenge adding an RSA SecurID server as an external identity source.In ACS, we would create an internal user but configure the passw...

Scenario #1:prodacs1 and prodacs2 version 5.4 patch 6 with IP address of 10.1.1.1/24 and 10.1.1.2/24, respectively.  Both prodacs1 and prodacs2 are running on VMWare ESXi 5.1.  Both are sync'ed with Active Directoryand authenticate users to manage Ci...

HI. I wanna configure the following on Cisco ISE 1.2.1.Self-registration portal for guests (SSID: guests)802.1x user certificate check (Cisco NAM supplicant) for employees (SSID: Corporate) (EAP-TLS)Self provisioning portal (to deploy BYOD certificat...