Network Access Control

Resolved! Backing up and Restoring ACS 5.x

All,Can I check I've understood the ACS backup and restoration procedure? Am I right in thinking:A backup run from exec as "backup <filename> repository <repository name>" is the same command run automatically by "System Administrator -> Scheduled Ba...

Resolved! access switch and ap's for BYOD

good day,i'm reading the BYOD document and found out that the switch and ap's below are the only listed on their designed, does it mean normal 3560's and 11xx AP's series can't support BYOD solution using ISE? could someone confirm please?cat switche...

Resolved! ACS 5 Appliance - Can I use EtherChannel or Standby Interfaces?

Hi,I think the answer's no, but if I want to make my ACS appliance (not the VM version) more resilant, can I use more than one NIC to connect it to a switch stack?Cheers!Paul

Remote Agent for ACS for Windows 2008 R2 64-bit

Hi,We having difficulties with installing remote agent on windows 2008 R2 64-bit server and got the attached error.Our ACS is 4.2.0.124 and remote agents we tried are :Remote-Agent-ACSse-win-v4.2.1.15-K9.zip and Acs-4.2.1.15.9-RA.zip.I see following ...

Resolved! aaa new-model

How this command works "aaa authentication enable default group radius"? I used Cisco Secure ACS 4.2 as my Radius Server but I can't login.. Is there somebody here can give me a thorough understanding on this command? Need this for my CCNA security e...

Installing single SSL certificate on primary/secondary ACS boxes

I am trying to install the same SSL certificate I have installed on my primary ACS on my secondary ACS. I have replication configured and working between the two. The primary is the ACS appliance. The secondary is windows v3.3. The problem is the sec...

ACS 5.1 shows no logged events in Monitoring and Reports

HelloI have a Cisco ACS 5.1 virtual appliance which has been working fine, I have however just discovered that it is now unable to provide me with any logs.TACACS authentication is still working without any issues, the only problem I have is viewing ...

Resolved! Monitoring ISE node as syslog destination

Hi Security Experts,We are setting up Cisco ISE (Identity Services Engine) in our network. I have the confusion if we need to configure monitoring node IP address as the syslog destination on the access switches. In what situations is this needed and...

Resolved! Cisco ISE and external syslog server

Hi Security Experts,We are starting with deploying cisco ISE (Identity Services Engine) in our network. We have allocated 250GB space for (Admin+Monitor) ISE node. I want to know if we can send the logs from monitoring node to external syslog server ...

Resolved! ASA view user certificates expiry date

Hello!There is ASA with remote access VPN and users are authenticated using third party signed certificates (CA is not local in ASA).When user certificate expires i can see it in syslog messages. For example: %ASA-3-717009: Certificate validation...

how to move ACS 4.2 to new server hardware (rebuild)

We currently have 2 ACS servers runing version 4.2. These are non-Cisco servers. How do I go about moving/rebuilding this on new and non-Cisco hardware?

OS Lion of Apple don't authentication in the Secure ACS

Hello my friends!!!!I'm with one problem, my OS Lion don't authentication in the Secure ACS Version: 5.2.0.26.10.For the Mac Lion operating system to work you must put in execeção the MAC Address of your computer. I wonder how it could cause the OS t...

ACS 5.2 NAC Guest Sponor Radius Authentication

For some reason, i can't get the lobby "sponsors" to authentication to the Guest NAC server (2.0.2) using ACS 5.2 via Radius. I was able to figure out how to get the Guest NAC Radius Authentication for "Administrator" to work by adding custom Radius ...

authentication event fail action authorize vlan

hi,when the supplicant is missing vlan500 is open for port and everything is ok, but when supplicant has wrong configuration something happend and port is always authenticating(every 30s, vlan500 is not assign to this port with bad configuration supp...

VPN & WIFI access through AD

HelloI am new to Security, currently the VPN and WIFI users are getting connection through RADIUS. Now my managment wants to change the authenticate with AD. Please advice with steps.Thanks and Regards,Shahul Hameed

Network Access Control

Forum Posts

Resolved! Backing up and Restoring ACS 5.x

Resolved! access switch and ap's for BYOD

Resolved! ACS 5 Appliance - Can I use EtherChannel or Standby Interfaces?

Remote Agent for ACS for Windows 2008 R2 64-bit

Resolved! aaa new-model

Installing single SSL certificate on primary/secondary ACS boxes

ACS 5.1 shows no logged events in Monitoring and Reports

Resolved! Monitoring ISE node as syslog destination

Resolved! Cisco ISE and external syslog server

Resolved! ASA view user certificates expiry date

how to move ACS 4.2 to new server hardware (rebuild)

OS Lion of Apple don't authentication in the Secure ACS

ACS 5.2 NAC Guest Sponor Radius Authentication

authentication event fail action authorize vlan

VPN & WIFI access through AD

High Response time for Entra ID TEAP with ISE

Cisco C9200-M Meraki agent posture support - ISE integration

Cisco ISE SAML - renew ADFS SSO signing certificate

Instability with ISE servers deployed in AWS

ISE Posture status Pending in ISE when authc on switch is mab dot1x

Cisco CoA 1200

ISE 3.3 Patc 5- user cannot change password if expire

Cisco ISE upgrade from version 3.3 patch 8 to patch 12

DHCP for VoIP phones using Access Manager

MACMOVE network loop generated randomly with access manager enabled