Network Access Control

We have a Cisco 5510 with 2 IPSec Connection Profiles each using a different IAS for authentication.If we add another VPN profile we need another IAS.With Cisco ACS can it be configured for different VPN profiles from the same ASA 5510?Thanks...

I'm looking for help getting certs installed. Currently I'm using a self signed cert issued by ACS. We are having an issue where occasionally we see in our Windows 7 logs that Windows did not like the self signed cert from ACS when doing dot1x authen...

Hi,I'm struggling with configuring a Role-Based CLI View that allows users in the view to configure an interface but not being able to delete it.This is my view configuration:parser view my_view secret 0 123 commands exec include copy running-config...

what's the MAC Address AVP that appears in accounting start record used for ?

Hi all,I have a office board room where we often have both internal and external staff working from. Sometimes there are training PCs which are not wireless  and I need to connect them to the guest internet. We don't use 802.1x, but I would like to b...

Hi~Could you please tell me how can I make user access for CLI (shell) on ACS appliance by means of WEB GUI. The point is that I have ACSAdmin as well as another administrator role users, but can't get access to appliance through SSH (Permission deni...

I'm running the 90-day ISE demo and trying to configure IBNS with it. I love the feel of the interface and almost instantly had a set of policies up and working fine. My issue is this:I have an authorization service for machines so before a user logs...

HiWe've recently setup our ASA SSL VPN to use our RSA Authentication Manager 7.1 system via the native SDI protocol.  It is working great but I'm wondering if there is some way to have the ASA and the RSA server exchange 'group policy' information......

Dear All,This is regarding with Easy VPN user logins and Tacacs+.As per current setup, we are using local logins configured on router to allow remote vpn users to connect it.Now we want use Tacacs+ to authenticate the users for accounting them.So ple...

Hi again.Nowadays, people have smartphones, typically iPhones and Android phones, and they all have WiFi.We already have a wireless net set up, with 802.1x security, where people connect using certificates and user informations stored in ADI would li...

I have IAS set up on my organization's AD domain controller.  Multiple policies set up for various authorization scenarios, authenticating based on Windows user groups and client IP, authorizing by passing "shell:priv-lvl=#" where #=desired privilege...