Network Access Control

Hi, The company receives many visitors who need to use the wireless network to authenticate it, I make a record in a web application, it generates a .csv and then saves it on an ftp server and run the command "import-data." It's taking aboutb 10 minu...

Hi All,I have some issues with TACACS authentication. Do the ACL created for SNMP affect the tacacs authentication if a permit statement is not given for the tacacs server ip.Regards,Piyush

     I am running ISE 1.1.1 and have gone through the design guide and setup the certificate based wireless authentication and device registration process using the ISE as a SCEP proxy for handing out certificates.  On the device registration portal ...

Hello,What is the minimum software level on the C3750 to support the 'device type class=voice' AV-pair returned by ACS?  I found 12.2(35) introduced MDA, but also I found 12.2(40) required for dynamic voice VLAN on MDA ports.  What i observe is :- ph...

I have been playing with ISE for a few weeks now. I want to get the thoughts of other more experienced ISE users. I have concluded, it is best to use EAP-TLS with CERTS to differentiate between corporate owned iPads and BYOD iPads. Although ISE does ...

I've installed two new ACS appliances in our environment running 5.3.  I've just configured the basics to get it on the network (ie DNS, default GW, IP address).  Looking at both running configs, they are identical with exception to the IP addresses....

Trying to install the just release patch 7 for ACS. Downloaded the release notes and am following them for patch installation.  First thing I noticed is when downloading the patch although the file has a .tar.gpg extension, when I download it through...

I have set up an AD Agent on a 2008 R2 member server and added two 2008  R2 DCs through "adacfg dc create".  Both DCs have account logon audit logging activated and they  were working, showing status of "UP" when running the "adacfg dc list" for abou...

Hi Folks,I have a dual appliance set up; with a distributed deployment. I am using my primary box as the log collector and I noticed today that if I point a networking device at my secondary instance for authentications nothing shows up in the logs a...

Hello.I'm trying to replace the client's IP in a wireless network using an IP configured in the RADIUS. We have tried with an ACS and now with a Microsoft's NPS and on both scenarios, i see in the WLC that the client should have the replaced IP but w...

Working on building a ISE 1.1.1 system to match our internal security policies, and have hit a dilemma. Here goes:The requirement states that there need to be differing network authorization profiles for different device types: Domain PCs, Non-Domain...