Network Access Control

Hi,I've setup an Identity Firewall on a ASA5510 version 8.4.5 (inside interface). ADAgent is installed and configured on an Windows 2003 server and connected to the DC (Windows 2008 server). Everything works fine except the NetBIOS Probe function.The...

Hello Everyone I would like you to please help me with the settings for integrating Cisco NAC solution with Microsoft System Center Configuration Manager (SCCM). I have understood that the NAC only integrates with WSUS but my client already made the ...

I want to have a local user in ACS that is permitted to login to routers. I have TACACS with AD already working but cannot get a local user to work. I used to do this in ACS 4.x.I created a user in the internal identity store.I tried configuring a po...

Hi folks,I'm trying to set up a repository to an FTP server with username/password where the username is domain aware, i.e. username is gb\FTPuserI've already created a repository which doesn't use username password, and all OK, but nothing I've trie...

Hello,Is there a way to disable accounting for a single Level 15 user? The NAC appliance has a level 15 service account, and consumes too much accounting DB space every time it logs to devices (the NAC runs 4 commands every time it logs to a device, ...

I want to download per user or per group ACL from ACS to IOS router ;where can I find the syntax to code the CISCO av-pair, in ACS, to allow such functions ?thanks in advance

hI  AllAbout to apply a patch for the first time on the ACS 5.3 tonight.Ihave tftp'd it onto a directory i have created on the server.However my support hints i may havre to rename the file ?is this true ?copy the latest patch file you got from Cisco...

I have been deploying IEEE802.1x to protect the ports on my network. This works well, when the protected ports are on a L2 access-only switch, that is to say, a switch that does not carry any SVIs or do any interVLAN routing. If I attempt to run IEEE...

Hi! Have anyone used a SMS OTP server connected to the Cisco ACS server? I.e. you give user+trigger pin when logon to a VPN client, wait for a SMS on your phone with a new OTP and be able to input that on the VPN client who have been waiting for this...

HiI have just renewed the self signed certificate on a v5.2 ACS and expiry date of 2013 is showing in the ACS GUI. However, when I start an ACS Admin session and view the certificate information in the browser it is showing the old expiry date of 201...

Is there any way to differentiate company asset & non company asset machines as both use same AD credentials but only difference is company asset is domain joined machines & non company asset only use AD credentials. We want to create different autho...

Hi, I replaced an ACS certificate that had been installed as follows: 1. Generate CSR file and private key file, then send CSR to GeoTrust (Key length: 2048 and Digest to sign with SHA1)2. GeoTrust send me a certificate. Issued by "GeoTrust SSL CA".3...

Hi,I was wondering about CISCO ISE Licensing.I have 1000 devices license base/advanced, lets say I want to connect like 700 bridges to it, is there a way to make them static and/or use default network access (like ACS) ? so they don't eat up my licen...