Network Access Control

I'm trying to add a condition rule into an uthorization policy by using the 'NAS IP Address' with a IP address that has a wildcard in it, ie, 192.168.0.* but it doesn't seem to like that.  Does anyone know how I can use a wildcard in this field?  I o...

Hi everybody Can somebody help me about the recommandations to configure BYOD on ISE 1.1.1

Hi,We having ISE ver 1.1.1 and currently on PoC. I have the following points to be clarified for Posture and Remediation.1) How to configure a condition to check Windows Service pack (may be more than 1 Windows favor such as XP, Win 7 and Win and how...

Hi,We are planning to use Active Directory Authentication when logging onto Cisco Switches (part of vBlock) to achieve SSO. Can you provide some of the below information:1.Is Windows Server 2012 Active Directory Supported for such an integration?2.Is...

Hi,I'm currently looking for a solution in order to restrict the modification of the host internal identity store (add or delete MAC host) per group. The default administrator roles does not include "per group restriction". Under the ACS I defined on...

Hi,I am wondering, if both profiling and posturing is enabled on ISE, which happens first? My guess is profiling, but I could not find any Cisco document that says how this works?Also, one more question, during client provisioning, the ISE must know ...

Hi I has dome issues with ISE. After formating the ISE by botting from a CD with ISE 1.1.2.145, I am getting the following prompt:localhost login:and when I entered the "setup" keyword, it didn't provide me the initial configurations but instead aski...

Hi,I have a BYOD setup that is working well except one thing that is enoying, I cant get iOS device's to trust the ISE server certificate.Tested on 2 iPads and 2 iPhones.When runing Wireshark from a Mac I can see the certificate chain in the TLS pack...

Hi Everyone,My Cisco NAC Profiler got stuck and showing the current modules are Stalled and Stopped. They were working perfectly fine till yesterday....Cisco NAC Manager SW = 4.9.1Cisco NAC Server SW = 4.9.1Cisco NAC PRofiler = 3.1.1.18The output com...

Hi guys I have installed a dot.1x solution for a customer using ISE. The ip phones have certificate from CUCM server. In the ISE a wired-dot.1x with eqp-tls enabled policy is configured so that when ip phones or PC connect to network they get authent...