Network Access Control

I am trying to add a compound condition that points to an internal identity group in an authoirization profile. Something like the rule below.However the rule never gets applied for users in the IT identity group. It moves to the next rule down and a...

Hi I am trying EAP-TLS authentication on ACS 5.1.I have placed the Root CA of the device certitifcate on ACS.But getting this error.OpenSSLErrorMessage=SSL alert code=0x233=563 ; source=local ; type=fatal ; message="X509 decrypt error - certificate s...

What is the diffrence between the following commands?tacacs-server host 10.10.10.10 single-connection key test01- and -tacacs-server host 10.10.10.10 single-connectiontacacs-server key test01

my ISE has been gone out.the service was stoped, and I was able to ping to ISE.I did not know that the services was gone until I tried to associate with ssid.so I was wondering if there is a way to notify me that the service(and ISE) is down.Can I us...

Hello,I am trying to configure EAP-TLS authentication with AD certificates. All ISE servers are joined to ADI have the root certificate from the CA to Activie Directory installed on the ISE serversI created the certificate authentication profile usin...

How often does ACS 4.1 purge dynamic users from it's user group after inactivity?We're trying to disable access to certain resources via a NAR, and finding that some users are not in the ACS dynamic user database, despite that, at one point in the pa...

We are trying to get our cisco  switches (2960) to handle 802.1x with MAB on or network.  We are wanting  our cisco phones to authenticate by MAB on our Microsoft NPS server and  return a AV pair with a smartport trigger.  We can only get the phones ...

I have a question about how the certificates work when using PEAP on ACS 5.2. But first let me explain the current set up so the question makes more sense. Currently we have clients which are Cisco wireless IP phones that are using the ACS server(s) ...

I am in the testing phase of configuring my ASA for user-identity.  I have ldap setup and working along with the ad-agent.  I can create and successfully use policies based upon user-id logon etc.  My problem is the firewall user database marks me as...