Network Access Control

Hi there,is there a matrix that compares the NPS vs. ACS to see the advantages or disadvantages of the products.e.g. I see that I can access only one domain, we have the problem that we have some domains we need to ask for access groups. They have a ...

I'm a little confused about the configuration of max user sessions for device administration with TACACS.When I've changed the configutration of unlimited sessions for a value in Access Policies > Max User Session Policy > Max Session User Settings I...

We are currently using ACS 4.2, for Wireless authenication we authenticate with Current User and Local Computer Certificates. How do we remove authentication part for current user so it just uses the Local computer certificate for authentication. We ...

I am trying to secure changes to switches using ACS 5.3 and allowing our technicians to only change the vlan for user ports on the switches.  How can I use regular expressions to filter out the 1/1/# ports so that those ports cannot be accessed in co...

Hello Everyone,Can a single ACS appliance be integrated with a diff OU in the AD (maybe with a diff IP address range). If yes, how?Thanks,Rishi

I am having difficulty with AAA setup on my recently upgraded ASA 5520.  I upgraded from 8.3(1) to 8.4(4) and my AAA no longer works.  If I use Kerberos I receive time skew errors (works fine on my remaining 8.3(1) ASAs) and when I setup LDAP I get "...

helloi'm running into some problems with ACS 5 and the External Proxy Access Service policy. The issue is the same as outlined here: https://supportforums.cisco.com/thread/2075329 i've also tried this with ACS 5.2 and 5.3. when i use the External Pro...

Hello guys,I need help for deploying Cisco NAC on remote branch. i did all the necesary steps & configs but still no luck, On main site we have OOB-Real IP Gateway deployment. all the campus is deployed but for remote branch it is not working, we hav...

Hi ALLCurrently trying to set up the above so that if an access service is not matchedthen it will go to the next one.Looking at the logs what happens is - our auth is set to AD so it matchesthat - then it isnt in the correct ext AD group and goes to...

Hi all,I got a Question to the context directory agent.We are using windows 2008r2 nap for 802.1x authentication on switch ports.Would it be possible to use the radius accounting for the CDA to assign the user ip mapping?Or is the radius authorisatio...