Network Access Control

I have already a running setup for wireless employees. Everything is working fine. Wireless Employees authenticate by AD through ISE. URL redirection is working fine. Posture requirements to check Hotfixs & AV installation & definition is working fin...

Hi all,Setup: lab envt that includes a Cisco ACS 5.3, a 2960 switch and a couple of host devices;Scenario: host devices fail to authenticate on Cisco ACS, and are redirected to a Guest vlan/zone;Objective: prevent host devices from seeing each other ...

We recently had to rebuild our ACS server.  Now when we have an 802.1x authentication failure and look at the RADIUS logs for the specific user, it does not show us the MAC address of the device the user tried to login with.  We use this all the time...

Hi AllI have been tasked with migrating from ACS 4 to ACS 5.3I havent had any training and so i am finding it a bit different.Currently i have this issue -I have a group in  the ACS 4 for users accessing via wireless on the ACS -Its called Service De...

Hi there, i am just not sure if this is correct behavior.i am running NX-OS image n5000-uk9.5.1.3.N1.1.bin on the nexus 5020 platform.i have configured authorization with tacacs+ on ACS server version 5.2 with fall back to switch local database.aaa a...

Hello,in cisco doc (http://www.cisco.com/en/US/docs/security/asa/asa84/configuration85/guide/access_aaa.html#wp1053730) is written:Merges a downloadable ACL with the ACL received in the Cisco AV pair from a RADIUS packet. The default setting is no m...

Hi,i want to control manageent access to symbol Wireless Switch WS6000 with my ACS.the issue is that i can't find the Vendor Specific Attributes forSymbol devices.i wonder if theres a way to control it with IETF or Other Radius Attributes.thanks in a...

HiI am trying to set up a filter for VoIP phones (not cisco) and use the mac address of 08:00:0f*                 Every time I try to submit this the ACS bounces is back saying the input is invalid despite it showing the same format in the example.  ...

Dear Cisco,Since we installed the mbssid feature on certain access points to broadcast 2 ssid's on thesame time, we are experiencing strange behaviour concerning certain users trying to log in : May 11 17:16:49: %DOT11-7-AUTH_FAILED: Station 0018.deb...

                   Hi all,On Cisco 1900 i see this on logMay 15 15:28:28.855 MDT: %AAA-3-BADSERVERTYPEERROR: Cannot process authentication server type tacacs+ (UNKNOWN)May 15 16:16:50.695 MDT: %AAA-3-BADSERVERTYPEERROR: Cannot process authentication ...

I have an acs 5.0 running on Cisco 1120 appliance. It has worked for 2 years.Suddenly, I discovered that user can no longer login with their credentials.On close examination, when I console, the booting does not complete. Screen shot attached.Please ...

This error shows up when attempting posture assessment on one of our patched Windows 7 computers, using Kaspersky Anti-Virus 6.0.4.1424 for Windows Workstations. It persists even if the Kaspersky Firewall is disabled and Windows Firewall is used in i...