Network Access Control

Problem with backup connection to AAA servers

Hello everybody.We have lots of Cisco ASA 5505 in our small offices in different cities. We make L2L IPSec VPN between every such ASA and central site.In central site we have ASA 5510. Behind ASA 5510 in central site we have 2 domain controllers.As ...

Resolved! ISE error ' private key is improperly protected'

I have two ISE PSN nodes that I am importing DigiCert ID certificates on.On one node this worked as it should but on the other I get: 'Private key validation failed: The password is invalid or the private key is improperly protected'This is a SAN cer...

Resolved! Identify Patch Version in ACS for Windows 4.2

Hi guys,I need to identify the correct patch Version in a Customer ACS for Windows 4.2How can I do this task ?In the about page I cannot find any reference to patchMy Best Regards, Andre Lomonaco

wlc 7.3 user-agent

Hi, Where do I report that iDevices are having weird user agent attributesWLS-AM%20890/2.5.5 CFNetwork/548.1.4 Darwin/11.0.0seems like this guy went to WLS-AM news site and that's what its coming up with.I've even had more of these casesUser-Agent ...

Resolved! HA ACS in two different subnets.

Hello, I have to configure two ACS 1113 ver 4.1 (4) high reliability, in two different places and two different subnets. An apparatus will have to manage an office, the second the other office, but if one goes down the other takes responsibility for ...

NAC agent loop and don't launch on some computer

Hi, NAC agent is loop when it starts and does not run on some computers.What can be these problems?

Problem to authenticate MAC address on ISE

Hi guys,I have a Lab with a ISE ver 1.1.1 installed on VMWARE, a Switch 3750, a WLC 4200 and one AP registered on WLC, the WLC and AP are connected to Switch, we are testing the user authentication using a samsung tablet and it work ok. The authentic...

Radius COA message to 3845 not working

I have a cisco 3845 running 12.4(15)T10.I can send a POD and disconnect my session. But when I try to send a COA, I always get back the same error. Here is the debug log:*Sep 14 17:25:16.017: COA: 172.16.XX.XX request queued*Sep 14 17:25:16.017: ++...

Resolved! ACS 4.2 user group mapping

Hi,We are using ACS 4.2.1.15 with patch 8 on ACS 1113 SE box.Our requirement is to assign ACS loal group to user on basis of windows Nt group. Which means I dont wants to create individual users in ACS rather when user will login, the auth request wi...

Can i know how many newtork devices can Cisco Secure ACSv4.1 support is there any limit on the same? It would be great if I get the Specs of Cisco Secure ACSv4.1 on the above grounds...

Resolved! Cisco ACS 5.2 Service Selection Rule

Hello Dears,I'm trying to setup the Cisco ACS 5.2 to do Dot1x Authentication for clients on windows 7 & windows XP, I did all the steps but I couldn't create Service Rule, it's giving me an error message you can see it in the attached screenshot.afte...

http profiling

Hi,Did anyone try WLC 7.3 Http profiling - • Support for detection and forwarding of the first HTTP packet with a user-agent attribute from a client per session to profile the client, where the controller acts as a collector, is added in this release...

connect some users on ISE Secondary node

Is it possible to connect users on secondary node?I tried it. I configure one switch to connect on the secondary node. A computer on that switch communicate with the secondary node and get and IP address from the DHCP. but It cannot download DACL.

Resolved! URL Logging for Guest Traffic using Guest Anchor and ISE

Hi there all,I'm looking for a solution whereby I can log URL information for wireless guest users to ISE. The anchor WLC sits in a DMZ behind an ASA and the ISE is on the internal network. I found this document (see URL below) which is similar but u...

ACS 5.3 Backup idea

IS this below alerts 1 . Incremental Backup Not Configured and Purge Configuration Repository not configured is must ? or it leads to any issues in future ? <TABLE style="BORDER-BOTTOM: #fc8932 1.5pt outset; BORDER-LEFT: #fc8932 1.5pt outset; WID...

Network Access Control

Forum Posts

Problem with backup connection to AAA servers

Resolved! ISE error ' private key is improperly protected'

Resolved! Identify Patch Version in ACS for Windows 4.2

wlc 7.3 user-agent

Resolved! HA ACS in two different subnets.

NAC agent loop and don't launch on some computer

Problem to authenticate MAC address on ISE

Radius COA message to 3845 not working

Resolved! ACS 4.2 user group mapping

Can i know how many newtork devices can Cisco Secure ACSv4.1 support is there any limit on the same? It would be great if I get the Specs of Cisco Secure ACSv4.1 on the above grounds...

Resolved! Cisco ACS 5.2 Service Selection Rule

http profiling

connect some users on ISE Secondary node

Resolved! URL Logging for Guest Traffic using Guest Anchor and ISE

ACS 5.3 Backup idea

UserPrincipalName not showing in ISE Log for certain user

CISCO NAM installation by iso generated by System Center

High Response time for Entra ID TEAP with ISE

Cisco C9200-M Meraki agent posture support - ISE integration

Cisco ISE SAML - renew ADFS SSO signing certificate

Cisco ISE upgrade from version 3.3 patch 8 to patch 12

DHCP for VoIP phones using Access Manager

MACMOVE network loop generated randomly with access manager enabled

New authentication during an active session

Installing Patches on ISE 3.x