Network Access Control

We have deployed dot1x in our network. Now we want to keep track of all failed authentications before any user reports a problem.I am wondering if there is an easy way to look at switch logs and  find out any authentication that might have failed...I...

I configured the below config in Routers it is working good , but when i do the same in SWITCH-2960 , i am getting a problem not able to login to enable mode ... i am getting the basic login only ....Error msg :   % Error in Authentication.Need to be...

     We have installed ACS 4.1 as authentication server for wireless SSID. Need to create list of ACS user expired on specific date.     Is it possible to create report in ACS 4.1 as per user account expiry date?     Need assistance for the same.

Hello all,I performed the acsview db compress command on  an ACS 5.3. The compression was done in about 20 minutes.. I wonder about the figures however.. when I check the sizes before and aftter, I dont really see  the benefit. The size seems even la...

if I'm not posting this in the right area, just let me know where it should go and I'll repost it there.I have a situation and need some advices.  I have a client deployed asa 5505 as easy vpn hard client on remote location, it is working great.  Cli...

Hi, we are trying to restore an ACS SE backup into an ACS Windows but we get the message error: "The backup file selected is either not a CiscoSecure V4.2 backup file or it has been corrupted". The version/patch level is the same in both 4.2(0.124). ...

Hi,Sorry if I'm not posting this in the right area, just let me know where it should go and I'll repost it there.I know that our VPN users currently use Active Directory to authenticate their VPN sessions, so now I'm wondering if there is an easy way...

Hi all, Say, my topology was using ISE doing VPN inline posture, and bind RSA securID (version 7.1) as external Identity Sources. During  the deployment, in order to let my iPEP node join the Policy Service  Node, for the certificate i using the thir...

Hi all,Is there any resources that I could refer on if I want to do 802.1x & MACauthentication for a particular user via Cisco Secure ACS 4.2? Ourmanagement would like to have double authentication on the LAN whenever ourstaff wants to connect to net...

Hi,i have created two ssid on WLC & authentication Via ACS to AD. after that i have configure TACACS+ on same ACS Server but some of the users can login in Wi-Fi which are not in member of Wi-Fi group.Please find the below ACS configuration.Group 1 >...

Hi,We have Cisco ACS version 4.2 running and would like to integrate with bluecoat AV for management users authentication and authorization using VSA attributes. These attributes are by default not available in ACS, details are in attached file. So w...

Hello Everyone,After a user is authenticated using  TACACS+, he/she must be authorized to access the IOS or ASA shell.  However, when i just configured authentication (without authorization),  the user can still access the level 15 shell after authen...

HelloI am trying to upgrade a brand new ISE 3395 from 1.0.3.337 to 1.0.4 (latest).  It keeps failing with % Manifest file not found in the bundleHere is the output:company-ise-01/admin# application upgrade ise-appbundle-1.0.4.573.i386.tar.gpg ftpSave...