Network Access Control

I'm currently checking an ise deployment recently migrated to production phasein the license count it shows 1-3 advanced licenses used but none of the authorization policies use explicit conditions that make use of the profiling grouping (profiling e...

Hi, I just configured two 3315 as iPEP HA pair in routed mode. Two hours after setup I noticed in ISE Admin dashboard a ~70% CPU load on both iPEP nodes.   Are there any commands to investigate this strange behaviour giving the fact that the cluster ...

I'm looking for Cisco ISE v1.1 to use the following licensing feature.http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5712/ps11637/ps11195/qa_c67-658591.htmlEndpoint is dynamically profiled by Cisco ISE and assigned  dynamically or statically to...

Hello,How old licenses migration during basic and advanced cisco ise?Regards,Alvaro

I am looking for a Diameter Auth Server Software that is open sourced and updated. I have been looking around for a while and can not find any software I feel I can trust or is even updated. -Dan

Does anyone know what would cause an NT remote agent to start failing NT authentications from trusted domains of the agent server without any changes to ACS, or no known changes to AD?Here is the scenario:ACSDomain A - Remote Agent 1Domain A - Remote...

Hi guys, I have a question about ISE and Symantec SEP 11. In my customer envrionment, they want to build a wireless byod work place.  But the endpoints are installed SEP software. Do you know the workflow for the SEP, when it check the system is not ...

I think I understood the customer concern. This is quoted from Microsofthttp://support.microsoft.com/kb/321051"The Lightweight Directory Access Protocol (LDAP) is used to read from and write to Active Directory. By default, LDAP traffic is transmitte...

Hi All,I am running ACS4.2 and want to configure a group for access to only specific devices.I have setup a group in AD and matched this to a group in ACS. Under Network configuration, I've added the device I want the users to access.In group setting...

I am trying to build a distributed deployment with the following personas:2 policy admin nodes2 monitoring nodes4 policy service nodesThis was a project that was partially implemented but never in production. It was in a distributed deployment, but h...

Folks,i am using the guest portal on ISE and WLC and i saw that all papers and guides are requesting that you need to use the Authentication (Web Policy) under Layer 3 security WLAN but for me just using the Passtrough option works fine, when i use t...

We are currently using Cisco ACS 5.3 integrated with Active Directory for authentication to our Cisco devices. We are looking to move to smart card logins and trying to find out if this is possible to authenticate to the console/ssh on the router/swi...

All,Can I just check my thinking?In the old ACS 4 world you could use HCAP to offload posture checking to Microsoft NAP as in:http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns171/ns466/ns812/guide_c07-491729.htmlI don't see anything for ...