Network Access Control

Hi, all.Since we upgraded to version 2.04 of the NGS, we encounter a strange AD group problem:Guest server is connected to our AD, there are two seperate Sponsor groups on the NGS:1. Sponsor - which is mapped to the AD Group "Domain Users"2. Sponsor ...

Hello guys,I am currently testing ISE with the anyconnect.So the strange thing is that ISE tells me i am authenticated, authorized.And the switchport tells me the same...Switch#sh auth session int g0/7            Interface:  GigabitEthernet0/7       ...

I have an environment like this:- Active Directory of Windows 2008R2 with the domain CCIESEC that also serves DNS and DHCP for clients inthe CCIESEC domain.  Clients are consisting of Windows 7 64bits Enterprise.  These AD servers are residing on net...

Hi, i'm getting inconsistent results on a old ACS 4.1 Platform. (Able to Log in the Device via Telnet not via Console). In doing some investigation with an engineer we were able to determine that the ACS Server 4.1 is reject new-code and works with l...

Could someone please detail how to find the exact version of a Cisco ACS NT Agent?For example, if you are running ACS v4.2.1.15 Patch 4, there should be something on the NT server (file or registry entry) that would indicate the agent is also v4.2.1....

Hi All,In our setup, we are are having FWSMs running version 3.2.22 and users are authenticating using TACACS (running cisco ACS). We would like to give restricted access ( some show commands ) to couple of users to all devices. We do not want to use...

Hi Experts,we have AD Architecture that parent domain and three subdomain as per the region, and ISE Administration/Monitoring Node will be in one subdomain and each region will have its ISE node with policy persona.looking for guidnace on how the IS...

Hello!I`ve tried to configure authentication through AD. Intergation Cisco ISE with AD is successful and I can retrive all groups from AD. I`ve configured dot1X authentication (Policy>Authentication) to use at first AD, then Internal Users.I`ve confi...

hello, I am on my way to make this ISE works.Now I am able to do posture assessment and reauthenticate with success.The logs says that's OK, I have two lines.NACAgent on the host do the job correctly but the NIC says : "Network failure" despite NACag...

hello,do i still need ACS if i have the NAC appliance say 3310.thanks

Hello, I have a 6509 switch that is running 12.2(33) SXI9 code that has a unique issue. When the client connects they are authenticated and match an authorization profile that gives the default PermitAccess.   Unfortunately at this point the client ...

Hi,I am setting up wired ISE environment. Everything is going fine, except url redirect is not working. I just wondering, if using self-signed certificate on ISE server has anothing to do with the problem ?.Appreciate your input.Thanks

According to traces collected in mt ACS SE 4.2, it would seem that the underlying software does not support the RADIUS Status-Server request. Anybody know if this request type is supported in version 5.*? Thanks.