Network Access Control

Hello,I have two ACS 1121 appliances and we have configured a second NIC port (Gig 0 and 1) on the appliances in seperate subnets. Gig 0 Nic is configured with IP on my management VLAN 10. Gig 1 Nic is configured on production VLAN 20 for TACACS auth...

Hello,I'm trying to setup a Aironet 1600 appliance to provide Wireless Networks to my customers.I want to :      - authenticate the mac-address of the clients     then, once authenticated     - authenticate Users with Active Directory login/passwords...

Hello Security masters,my goal is to perform a PEAP authentication against Microsoft AD with the machine credentials of the Windows PC.The question is, how my authorization policy looks like? From my understanding I have different possibilities to so...

Hi allI think that something is definitely wrong with the posturing rules on our ISE. I am seeing weird behaviour when changing posturing policies and thier elements in our ISE.In Full, we currently have a policy written with a requirement that clien...

Hi There,After a lot of java updates our ACE 4.1.1  server does not render pages correctly locally on the server. The fix we have found to be  is to roll back all the java updates to a much older version.In light of the security concerns of java, is ...

Hello.Sorry for my bad english.Environmentsupplicant: Windows 7 x86_64 with computer certificateauthenticator: catalyst c2960s ios 150-2.SE2authentication server:  2x - Windows server 2012 NPSauthentication method: EAP-TLSSwitch configurationinterfac...

Здравстуйте.Имеется LAN (192.168.11.0/24) с граничным роутером cisco 2821 (192.168.11.1), на котором настроен Easy VPN Server с локальной авторизацией удаленных пользователей, использующих для подключения Cisco VPN Client v 5.0. Все работает. В той ж...

does any one know how to use certificate attributes in authorization policy when I authenticate with PEAP ??is it only working when I authenticate with EAP-TLS ??is there any way to use these attributes with peap ??Also, what are ways to distinguish ...

Hello Dears,I have Cisco ACS 5.2 server and 2 DC with two different domain name. Cisco ACS is connected to DC1(xxx.xdomain.com), and working well. Between these DC(ydomain.com) have two-way Trust Relationship. How I can authenticate DC2 users in Cisc...

I am currently working on implementing ACS 5.3.  while i was configurating  access policy for the default device admin i realized that it is using PAP as its authentication method.  i have tried to change it to chap or mschap but the log show autheni...

Is it possible to do certificate/machine authentication for VPN users (ipads, smartphones) with ISE/iPEP?If I set the ASA to do RADIUS authentication (pointed to the ipep) the user gets a username/password box from AnyConnect. I don't see a way to tr...

                   Hi all,we have a distributed deployment and when we snapshot out ISE VM's, they become unavailable for 1 - 2 minutes...Is this normal? Is anyone else seeing this?they have VMWARE tools installed although VSphere Client is showing t...

Hi all,we have an ISE vmware deployment and nearly once a day, the ISE triggers an alert and sends me email alerts avising that the system is running low on memory.however when we look at the resource useage in VMware Vsphere client, it shows that me...