Network Access Control

I have an ASA 5510 on the outside with a Remote Access VPN.  The user will need to get from the 5510, then go through an ASA 5540, then out to the subnet where they will be doing their work.  I have a Cisco ACS version 5.2 that sits on a separte VLAN...

Hi there,I'm currently trying out dot1x authentication with MDA. The phone is currently authenticated via MAB. I succeeded to do the same with a Win7 workstation, but now I have a problem with true dot1x auth. Whenever the client tries to authenticat...

Hi,I have a problem with my Guest NAC server (GNS) - it is rejecting RADIUS access requests from my WLC.  Running tcpdump (-i eth0 udp port 1812) confirms that the WLC is sending access requests to the GNS.  However, GNS, with all logging configurabl...

Hi All,We have implemented wlan security with authentication type eap-fast.Active Directory integrated with ACS for user authentication with single sign on.For xp clients wireless utilities available with specific vendors and now the problem is comin...

hi forummers'i would like to ask i can create profiling policy in order to reduce overall load generate from policy service node. exampleWorkstation - unique atrributes : MAC address- probed used        : RADIUS- collection method : RADIUs authentica...

Dear Community!I would like to configure Cisco ACE 4710 CLI and WebAmin to use ACS v4.2 TACACS+ authentication and accounting feature. After found a Cisco document, which describes ACE AAA features (http://www.cisco.com/en/US/docs/app_ntwk_services/d...

Hello,this is what happens when I try to join an acs 5.3 to the domain. On two other acs appliances, it works.  Any idea ?thanks

Hi, how can I configure ACS 5.2 to send syslog messages to CS-MARS ?thank you in advancegreatingrs

We use the following constellation: Supplicant -> Cisco Switches -> Cisco ACS -> Open LDAP.Originally, PEAP-MSCHAPv2 should be used, but it doesn´t work with Open LDAP.Now we have to accept another authentication method, for example PEAP-GTC or TTLS....

does any one know if it is possible to install the CAA on a machine then make an image to install it on all enterprise machines ,will this work or not?

Hi,  I have configured remote vpn on my Cisco ASA and users connecting to this will use Cisco VPN dialer and gets authenticated with the Windows 2008 domain controller credentials. Now the problem I face is, when i set the option for user-A as "user ...

We have a Cisco NAC made up of a CAS and a CAM running 4.8 code, based on Cisco security advisory cisco-sa-20111005-nac it is recommended we update the CAM to 4.9 code.  Can anyone advise if a solution running CAS 4.8 and CAM 4.9 is certified as FIPS...