Network Access Control

Hi..We are deploying ISE 1.1.1 for an enterprise customer. Having some doubts about postering. Customer wants to check windows update as part of posture check. What I understood, ise supports only wsus. There is a predefined rule pr_WSUSRule,which ca...

Hi All,Its a Cisco Acs 1120 device having version 5.0.I have cerated three basic user group which having privillage leve 15,10 and 1 on ACS Tacacs+.My configuration for AAA on Switch is as followsaaa authentication login default group tacacs+ localaa...

Hello,Every couple of months or so our primary CDA server stops mapping and starts generating "Too many open files" errors (around 50 errors per second).This is the error:Log attributesevent exception exception-stack java.net.Socket.createImpl(Socket...

Could someone please clear up the topic regarding ACS and certificate key lengths for PEAP?  I have not been able to confrim through research.  In the ACS documentation, it states that using a key length of >1024 will not work - it will appear to pas...

I have recently set up a similar network using Ruckus equipment; however, need to do it now with Cisco...I have a multiple SSIDs associated to different VLANs broadcasting.  I would like to configure a single Radius server pointed to my NPS server an...

Dearsi have issues profiling the Cisco ip phones , it's profiled as "PROFILED"  the only probes i enabled on switches and ISE is Radius and now i know the i need to enable CDP device sensor so it can be sent via Radius accounting but i can't find the...

Dear All Experts in ACS,I need your advice whether ACS has such capability in controlling access to a group of devices in time-based.My client had restrict the change windows starting from 00:00 - 06:00 midnight, to comply toward this restriction. We...

Tacacs  Authentication and Authorization were passed on ACS5.3, but Entering username and password in the security device (Juniper SSG5) gives Access denied, attached is Tacacs cfg.set auth-server TACACS+ id 1set auth-server TACACS+ server-name 10.10...

Im getting this errorAuthentication failed                                                                                 : 22040 wrong password or invalied shared secretI am 110% sure that the shared secret is the same, and i have confirmed the pas...

Hi All, I just had a quick question regarding EAP-FAST migration for ACS 4.x to 5.x. I have all the pieces in place to do the migration, all tests seems to be working fine, my question is about EAP-FAST master keys, exporting from 4.x to 5.x and the ...

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Identity Services Engine (ISE) and its various use scenarios and integrations such as BYOD, Active Directory, profiling, postu...