Network Access Control

Hello All,I need to upgrade an ACS deployment (Primary & Secondary with the Secondary as the log collector) from 5.1 to 5.4.From what I understand, I need to do a stepped upgrade from 5.1 to 5.2 then to 5.4However the Cisco guidance on upgrading from...

Hi,I am trying to authenticate the Forticlient IPSEC VPN users with ACS 5.x via radius or tacacs. Is authentication possible by using tacacs?For radius, what are the Radius attributes to be configured on the ACS? Please help. Appreciate your response...

I’m really confused about the best practice to set up these devices in a 802.1x and Windows Domain network using ISE.I had seen the Ipad download the ISE certificate the very first time the device is connected to the SSID. In Android device (Galaxy p...

Hello! My question about Cisco NAC - Cisco NAC Agent and Cisco Clean Access Manager/Server.Can i install cisco nac agent with xml configuration before installation  Clean Access Server in the branch?

Hi,I am creating user authentiaction for switches and want to create 'per user' enable passwords. Per Cisco documents I created a shell profile with priv 15 and now I want to put it under Access Policies. Unfortunately I cannot edit/add anything over...

Hi, I have ISE 1.2 and catalyst 2960I have 2 ISE node, the 2 ISE is PSNNormaly user are authenticated on ISE1(192.168.1.1), if ISE1 is not available, user must be authenticated on ISE2(192.168.5.1)Once ISE1 become available, the user must be authenti...

I am looking to create a profile for VPN users in ISE 1.2Are there any best practices or articles that can be evaluated to determine how I can go about profiling vpn users?

As the subject says, I'm trying to see if there's a way to use TACACs for both device admin and VPN authentication on an ASA to the same ACS 5.5 server.   I know I could split up the protocols between RADIUS (VPN) and TACACS (device admin), I just ne...

Hello,We have a Cisco Clean Access Standard Manager running version 4.9.1 with the Windows NAC Agent version 4.9.1.6 running on the server for posture assessment of our clients connecting via SSL AnyConnect VPN. The CAS is running in an in-band Layer...

Dear All We have  two acs (version 4.2 ) , the replication was working  for a while .After couple of days it stopped working What could be the problem  ? Please help Do i need to manually replicate ? ( it is actually scheduled ) What  is actually del...