Network Access Control

Dear all,I have a HA NAC Server and a HA NAC Manager. Everything is already setup, user can login to NAC Agent normally. But i cannot access web GUI of NAC Server from all segment ip address except from NAC Manager segment. I have set management VLAN...

Hi all, very simple question regarding the fields in the PAC provisioning section of ISE. Basically wondering what the "identity" field under machine and tunnel PAC is meant to be? I am currently planning an EAP-FAST deployment and this is the only a...

Hey guys, I am having trouble with a ISE (1.2 patch5) at a customers site when deploying customized html pages for wireless guest-access. The reason we need to use these customized templates is that the language template for the AUP seems not to supp...

Hi all, customer has a problem that whenhe move AD login for the ise webportal it not working.using a "general group" for a user where all users are in this group, but he is faced with ISE cannot find his account. with regard to another issue from th...

Hi all,my issue is different to the usual admin account lock out.we have two ise's, primary admin and secondary admin. The admin CLI password works for the secondary ISE but it does not work for the primary ISE.so, i wanted to shutdown the primary IS...

Hi dears,I have 2 physically Cisco ACS model. I want to deploy one of them is Primary and other one is secondary. How i configurate this deployment?? must I be assign each ACS different ip adddress?? what about the license??THANKS.

We are looking at setting up dot1x in our libraries however I have been asked to see if there is a way to force a switch port to require machine auth before user auth.  The reason for this is a problem we have that users will disconnect the ethernet ...

Hi All,I want to allow one vpn user to access vpn based on his public IP. For example if user access vpn from 1.1.1.1 then only he should be able to connect to vpn.I created network authorization profile under access policies as belowsystemuser=vpnus...

I upgraded from ACS 5.4 to ACS 5.5 about a month ago and just using ACS for TACACS only. After the upgrade on the primary and secondary, I stopped seeing anything in the logs as far as passed and failed TACACS attempts. The weird thing is that the pr...

I understand that there is a migration tool that can help upgrade ACS 4.2 on windows platform to 5.5 apliance. However, it does not support certificate migration.Customer is using client certificate for wireless client authentication. Does that mean ...

I am running ISE version 1.2,0,899, agnet 4.9.4.3. When the windows 8 connects with the NAC agent I get a compliant message on the windows box, but I am not getting an 802.1x authentication. After about 10 minutes the windows box will pass the 802.1x...

Hi dears,I have 2 physical Cisco ISE devices. I want to deploy high availability. So I want to know that how many license needed? Do I need two seperate license for each devices??Thanks.

Has anyone successfully profiled an Xbox ONE? I have the Xbox 360 working well, but the ONE doesn't even get recognized as a Microsoft device by ISE. Thanks.

Hello everyone,Does anyone know if it is all possible to disable port 80 but yet keep 443 running on the ACS 5.5 build?  Thanks

Dear Experts,Does ACS support Radius Single Sign On by forwarding accounting message (port 1813) to 3rd party device?Thanks & regards,Ben