Network Access Control

Hi all,We are going to implement dACLs through ISE. This dACLs will have arround 400 ACEs for each user.The Cisco switch platform will be the following:4510450737502960SThese platforms are already running EEE 802.1x authentication and have SVI ACLs c...

Hellolooking for documenation how to setup ISE to authenticate VPN users. Right now we are usign ACS 4.2 to provide dACL and authetnication but would like to migrate this feature to ISE. Wea re using microsoft AD.Any good docs, white papers, field no...

Hello,I have typical deployment of EAP-TLS in wireless network, with ISE and AD. The  "Perform Binary Certificate Comparison with Certificate retrieved from LDAP or Active Directory", feature is activated.The problem is, when user accound in AD is di...

Hi!Regarding our international subsidiaries there are many names that contain the character "-" (i.e. Pierre-Pascal)When trying to create an new Guest Account the ISE refuses it because of an invalid character in the "First Name" field.In other formu...

Hi,I have a customer that purchased a GoDaddy Certicate to use with his Windows 2008R2 NPS.  The wireless clients can authenticate, but they are presented with a pop error message that reads as follows: "the Server presented a valid cerfiticate issue...

HiI'm in the process of moving our log collector from our primary ACS to a new secondary ACS. I have changed the log collector and that worked ok. I'm now trying to do a restore of the incremental backup taken this morning but nothing seems to be hap...

All,I know ACS 5 lacks the IP Pools of earlier ACS versions. I'm looking at a 4 to 5 migration and was thinking of just configuring the IP Pools on the router ("ip pool local" etc) and sending back a RADIUS Cisco Attribute pair with the name of the p...

Hi guys, I saw the HW specs of the 3415. http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5712/ps11640/data_sheet_c78-726524.pdfThere is a spare part for the disk and for the power supply. Does anyone has the experience if the ISE software will c...

In ACS 5.4, cryptobinding TLV support was introduced to ensure that both the client and ACS participate in inner and outer EAP authentications for PEAP.I see that on Windows 7 clients, a checkbox for checking if the cryptobinding TLV is used is avail...

Has anyone had success with getting the Sponsor Portal to provide the sponsor information for guest accounts?  This would be a very helpful piece of information.If this information is not displayed on the homepage, can it be made available in the det...

Hi All,I have two ACS4.2(Windows image on Win2k) in my environment. Some regions are configured as a primary for ACS1 and some on ACS2. All devices are configured in both ACS. When ACS1 goes down, it didn't failover to secondary ACS server. All AAA c...

Hi to everyone,We have a diagram similar to this:User -> AP Aironet -> Cisco WLC -> Radius Server -> Cisco ACS 5.3Now in details:User takes a notebook to Access a wireless network that uses PEAP-MSCHAPv2 as the authentication Protocol. The user has t...

Hi everyoneI have and ACS 5.4 with 4 Network Access policies with 4 Access services rules:A) Default Device Admin -> Rule 2 -> match Radius All Devices :Wireless:Wireless_WCSB) Default Network Access -> Radius 3 -> Match Radius -> ANYC) Wireless_WCS ...