Network Access Control

Hi,We are using ACS 4.2(0) Build 124 as a Tacacs server. If we create a user which we have created and deleted before and this user must be change password on first login, Tacacs server ask we to enter new password but user cannot enter to network de...

Hello,I am adding active directory to my acs5.0 and i got this error "clock skew error"My ACS has the same time with the active directory and same timezone GMT+3.thanks

We have managed to get the above working please find the enlcosed Link for Windows 2003 Certification Authority.http://www.isaserver.org/img/upl/vpnkitbeta2/pubwebenroll.htmThe problem is that when we revoc the certificate in the revocation list we c...

Verisign as of Oct. 10th has change the root ca they sign CERTS with. Our 802.1x supplicants are configured to trust only the older Class 3 Public Primary root that is part of widows. Is there any way to configure the ACS box to support the older roo...

HiI have installed a solution de control acces with 802.1x. Actually there are two ACS apliances (redundancy) integrated with Windows 2003. My customer in one month change his platform windows 2003 by windows 2008. I need to know if this change affec...

Using Network Address Translation, we use (1) outside ip address for multiple internal website logins. That is, the first site would be xxx.xxx.xxx:81 and the second might be xxx.xxx.xxx:82 etc.We're planning on using the Cisco ASA's native RSA authe...

Hi,I am trying to integrate ACS 5.2 with Active Directory. I keep getting the error "Global Catalog port status error".- I have ensured that the ACS server is configured with the same NTP server as the AD server- User credentials might not be the pro...

Somebody help!!! JEverything working just fine but after switch restarts authentication fails. (cat4500e-ENTSERVICESK9-M), Version 12.2(53)SG2ACS 4.2 in ACS  can see   Authen session timed out: Challenge not provided by clientSwitch says : Sep 30 19:...

HiI have an customer with an ACS config that has an identity store sequence to authenticate agains for tacacs.  First the internal database is checked for the user.  If they do not exist there they are checked against AD.If the user is one of the 200...

I'm currently working on a proof-of-concept for 802.1x wired authentication using ACS 5.2, with Windows 2008 active directory as the identity store.  I know how to do dynamic VLANs based on AD group membership, but is it possible to dynamically assig...

Hi,I wonder if I need to go through "Lookup Server" and Mapping Rules" under "User Management  - Auth Servers", if am using AD for user authentication only. Once user got authenticated and postured assessed, then he will be placed on Access Vlan pre-...

I have an C4506 with a  WS-X4548-GB-RJ45V module. I am running version  Version 12.2(54)SG, I have implementet 802.1X on the access-ports but I can´t get multi-domain configuration to work.Mostly the PC-client is connected to the phone and the phone ...