Network Access Control

Hi, is there any possibility to match on a custom EKU with ACS 5.5?I have to create a solution to limit access to a specific WLAN SSID. Only certificates containing a specific, self-created EKU should have access to this SSID. Other certificates from...

As part of an ISE implementation, I want to test ISE failover for Admin, MnT, and PSN personas.  Does anyone have an ISE failover test plan or ISE failover test best practices documentation to share? Thanks much,David Daverso

After the user logs into the portal and register its device I can´t seem to find a way for an auth policy to capture the data and permit the device into the network. So the flow would be MAB->CWA->Permit access if users are in identity group name "X"...

hi ,i have  configured my ACS 4.2 to  assigne static ip addres to vpn users (172.17.17.100) ,the acs assigne the ip address but it  gives the users the default subnet mask (255.255.0.0) .i want to change the mask to be 255.255.255.0 .it's possible ? ...

Hi All, I want to implement network access control system in a fashion that when someone from outside access our network (Wired/Wireless) he should not have direct access to our system. There must be some authentication, authorization and accounting....

 Hello All,One of the customer is having ISE in their environment and they have windows 7 & 8 for end users. However they want to connect a windows server 2003 workstation on the user vlan but as far as I know there is no NAC agent available for wind...

Is it possible to set a dot1x user to have a time limited session? Scenario is a wireless PEAP client connects to a wlc controlled access pointManagement wants that session to last no longer than 10 minutes and then is disconnected and not automatica...

Hi Community, I have a few questions on ISE functionality so here they go. I would  like to have only one open SSID with a limit of three devices per user, these users are from the internal database. The flow would something like this: the users conn...

Goodday everyone,I tried to install a CA certificate on a ASA and I recieve the following debug messages: CRYPTO_PKI: can not set ca cert object (0x722)CRYPTO_PKI: status = 65535: failed to process RA certificateCRYPTO_PKI: Failed to retrieve router ...

Hi All,1)Is it possible to disable users from changing their password in acs? The user have access to all devices.2) Is it possible to prompt users o change enable password? Please advise. Thanks 

Hello, We use a windows server 2008R2 and NPS for radius authentication of our 887,881 and 891 routers, ASA V8.4, and 3750 switches.We are thinking about migrate our radius to windows 2012R2, wich is a new version of NPS. do you know if there is a mi...