Network Access Control

Hi,I found the below Hot-Fix to be set;http://blogs.technet.com/b/jeff_stokes/archive/2013/01/24/20-minute-delay-deploying-windows-7-on-802-1x-fix-it-here.aspxKindly let me know that what is the best time to be set on it. It tells 20 mintues. Also, i...

Hello,We have implemented BYOD with certificates with ISE 1.1.2. After registering the device and installing the certificates for the devices, a network profile is applied that makes the susequent connections to the same ssid use EAP-TLS. All works a...

When I upgraded my cisco 3750 ME from c3750me-i5k91-mz.122-46.SE to c3750me-i5k91-mz.122-58.SE2.bin all commands for radius disappeared? However, there are a lot of commands to ldap which was missing in the previous version. Seems as if the radius ha...

Hi all,after a recent upgrade of my ISE deployment from 1.1.1 patch 3 to 1.1.2 patch 8, the NTP service on the ISE now crashes at regular intervals.Can I have some help debugging this issue? I would like to check the logs but there are so many that I...

I am trying to configure RADUIS authentification using the UPN as a userame.I always receive the following error22056 Subject not found in the applicable identity store (s).does any oun know whyPatrick Roch

I was wondering if anyone had written any custom policy elements and profiling policies for Kindle and or Nook devices. We have a large quantity of users who are wanting to bring these devices in. We are on ISE 1.1.4 with all patches installed. I loo...

The current deployment is a 5 nodes (2adm 1mon 2psn)what the docs report is:You do not have to manually deregister the node before an upgrade. Use the application upgrade command to upgrade nodes to Release 1.2. The upgrade process deregisters the no...

Dear Friends, I appreciate if anyone answer my question. we have a domain more than 10k users, and we are providing corporate wireless access to our employees. currently employees are using their AD credential for authentication via ACS 5.4. We want ...

WHEN IS ISE 1.2 GOING TO BE RELEASED AND WHAT NEW SERVICES IT ADDS TO ise

Hi,I have configured the Tacacs (ACS 4.2v) on Nexus 7000 (as mentioned below) and works fine but unlike IOS (6509) It's doesn't prompt that you are in userexec mode (>) and then need to type enable and password for full privilege.In n7k when I entere...

HiI have ISE ver 1.1.x, cisco 2960, cisco 1800 and controller 2100There is active directory user (employee) and guest userActive directory have many user group (finance, security, human ressouce ...)For wireless conexion I created many ESSID in the c...

I seem to have an issue with the SCEP server when it receives the certificate request from the ISE server and I can't seem to identify why this is happening. Here are the error messages I get on the CA:Active Directory Certificate Services denied req...

Just wanting to see if anyone else has done this yet.  I ran into a couple of interesting snags performing this little ritual over the last day.  First, if you're using CentOS 6.4 (maybe other versions and other distros), the iso-to-usb.sh script req...

So hopefully someone can help me out here. I am trying to migrate wireless phones from ACS to ISE. Currently they are connecting using PEAP and validating the server certificate through ACS. Both ACS and ISE have certificates assigned from the same C...