Network Access Control

recently we have deployed downloadable acl feature on acs for asa vpn users and noticed that this solution have at least two serious disadvantages: 1. there is only possibilty to give split tunnel networks to asa by acl list name radius attributes an...

Hello all,by my fault, I've set invalid management certificate. So, the GUI became unaccessible right after reboot of the mgmt service.Mozila Firefox is reporting "Certificate type not approved for application (Error code: sec_error_inadequate_cert_t...

Hi guys, hope this is something you can help with…2 x ISE 1.2 (patch 5) 3415 appliances with hostnames webproxy1.customerdomain.com and webproxy2.customerdomain.comAD integration with customerdomain.localGuest authentication (CWA) using a separate in...

Hi,We are trying to authenticate a Check Point Firewall(GAIA R76) to a 5.2 ACS using TACACS+We are able to authenticate the user OK but when we do a  'tacacs_enable TACP-15' to get elevated privileges the session hangs and gives 'internal error' mess...

All,We've set a custom loging prompt under System Administration > Configuration > Global System Options > TACACS+ Settings On our IOS switches/routers, we are getting our custom login prompt sent, but the NXOS devices are not receiving this same pro...

I am trying to change the port number on the ACS running 5.2 and could not change it from the default of 49. Is there any way I can change the default TACAS port number? I tried in the system admin configuration, I can change all other values but not...

Hi,I am unable to use the GUI on our ACS 5.3.40 VM. I have already tried the reset-management-interface command twice and stopped and started the application and performed a reload. I've also cleared my Internet Explorer browser cookies / data etc. T...

AAA failed nexus7010and local username error# sh runError: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=17(0x11)

Ladies/Gents,I am facing issues when enabling tacacs authentication on my cisco switch, aaa login/password is working, aaa enable is not. Underneath details of my devices.Cisco ACS 1121: version 5.1Cisco Switch 3560: ios ver 15I also attached here so...

How exactly does the ACS deteremine which users are authenticated for access to a device?When our devices talk to the ACS - it checks the LDAP for pass/fail.  However, how do we prevent users who are in LDAP, but shouldn't have access to the device t...

I recently did an application upgrade to ACS_5.3.0.40. I was trying to install the next patch  5-3-0-40-9. i go through these stepsA. Logon to ACS server as adminB. Insert DVD that has 5-3-0-40.9.tar.gpg into onboard cdromC.at console prompt, type co...

Hello,I"m troubleshooting a 3560 port authentication issue. From what I was told from other members of my team when we upgraded to windows 7 at this site authentication no longer works. I compared an old config to a recent one and noticed there was n...

Hi,Thanks for taking the time to read my question.I've just installed two ACS 5.2 appliances and I'm trying to get them to join my domain, I've setup an account that has the relevant permissions (tested the account on a laptop and it can join the mac...

Hi ,We deployed ISE 1.2 (patch 3) with 5580 WLC to authenticate machines and users using 802.1x .We are experiencing a strange issue - randomly some machines authenticate fine over wireless and we are able to see logs on ISE and nexst day the same ma...

Hi,I am sure I have had this working but Just cant get it to now. So I have a Computer that has a Certificate on it with the SAN - princible name = to [email protected]. This is an auo enroled Cert from my AD. My Authentication profile says IF the S...