Network Access Control

I have an issue in  ACL-POSTURE-REDIRECT to download the NAC agent. I got the right page to download and install the agent from the access switch. However, I got error status-2 when trying to download the agent. The intial ACL was as followsip access...

Hi,I'm trying to integrate an external radius server with Cisco ISE.I created an External Identity Store>Radius Token Server.I created a Identity Store sequence with just one identity store just as creadted above.And I was able to authenticate succes...

I have an issue that I need help on.  This has to do with wired 802.1x NOT wirelessI have a network Windows 2008R2 Active Directory Servers and ISE version 1.1.2 patch-5.  The ISE is integrated with Active Directory without any issues.  The supplican...

Is it possible for a Juniper FW or Aruba Wireless or anything else that does native AD authentication can use an IPEP for policy enforcement without converting the authenticator (juniper / aruba etc…) to a Radius request to a PDP for the IPEP to buil...

Hi there, I was asked to performe upgrade from acs 5.3 to 5.4 (vm), but i noticed that someone installed it on 80gb partition and there is 500gb as one of the requriments in upgrade and install procedure. What is strange to me is that "dir disk:" com...

Hi All,I am looking for feature flow diagrams for ISE profiling and Posture services. Would appreaciate if anyone can point me to them. I just found one on Cisco website (attached), but need detail ones for profiling and posturing.            Thanks ...

Hi buddies,Is there any way to set up our ISE to provide Radius instead of acting as Radius Proxy? In our Company we use ACS 4.2 to provide AAA via Tacacs+ and this works proper with all our Cisco-Switches. Now we are testing the ISE 1.1.1 as NAC-Sol...

Hello,Cisco  NAC Agent is configured for a user laptop in one of the campuses. Wifi  is working perfectly fine for a partcicular SSID ( eg: SSID-X) , in the  Office areas, but when the user moves to his residence, its gets  disconnected and fails to ...

We are deploying ISE on a Cisco UCS platform.We have obtained the folowing: ISE-VM-K9=Cisco Identity   Services EngineVirtual Machine ImageL-ISE-BSE-5K=Cisco Identity   Services EngineHowever do I need any additional VMware licensing such as:R-VMW-UC...

Hi,  I have a working distributed deployment and only one user got into this problem today when rebooting his PC. The user and machine were authenticated successfully but the ISE remain the state on the POSTURE-REMEDIATION, with the NAC Agent running...

Environment :AP 2602, WLC 5508 V7.4, ISE 1.1.2, Prime Infras 1.2For a specific SSID, we use MAC address as 1 of the conditions to authorize access only for the company-owned mobiles (smartphones and tablets), the other condition being, for the mobile...

Hi All    We have ISE 1.0(4) running on vm ware with base license.We have two normal controller and one anchor controller also.We have to integrate WLC with ISE so that for guest users,ISE will act as the guest portal.Please send me the configuration...

HelloAcordint with this guide:http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/49/cas/s_adsso.htmlSection: Configure AD SSO in a Windows 7 Client EnvironmentThe krb.txt should be located under /perfigo/access/tomcat/conf fol...

I'm working with the following lab:ISE 1.1.3.1243560 running c3560-ipservicesk9-mz.122-55.SECisco AP (1131, 1231).I'm attempting MAB. The AP is being profiled correctly and I'm seeing successful authen and authz. But the device (AP/whatever) cannot p...

Hi therewe just migrated all users from an ACS 4.1 to ACS 5.4, that worked fine except that the expiration date is not migrated, even if I read, that this parameter should be migrated automatically.Now we would like to change the per user expiry date...