Network Access Control

Verisign as of Oct. 10th has change the root ca they sign CERTS with. Our 802.1x supplicants are configured to trust only the older Class 3 Public Primary root that is part of widows. Is there any way to configure the ACS box to support the older roo...

HiI have installed a solution de control acces with 802.1x. Actually there are two ACS apliances (redundancy) integrated with Windows 2003. My customer in one month change his platform windows 2003 by windows 2008. I need to know if this change affec...

Using Network Address Translation, we use (1) outside ip address for multiple internal website logins. That is, the first site would be xxx.xxx.xxx:81 and the second might be xxx.xxx.xxx:82 etc.We're planning on using the Cisco ASA's native RSA authe...

Hi,I am trying to integrate ACS 5.2 with Active Directory. I keep getting the error "Global Catalog port status error".- I have ensured that the ACS server is configured with the same NTP server as the AD server- User credentials might not be the pro...

Somebody help!!! JEverything working just fine but after switch restarts authentication fails. (cat4500e-ENTSERVICESK9-M), Version 12.2(53)SG2ACS 4.2 in ACS  can see   Authen session timed out: Challenge not provided by clientSwitch says : Sep 30 19:...

HiI have an customer with an ACS config that has an identity store sequence to authenticate agains for tacacs.  First the internal database is checked for the user.  If they do not exist there they are checked against AD.If the user is one of the 200...

I'm currently working on a proof-of-concept for 802.1x wired authentication using ACS 5.2, with Windows 2008 active directory as the identity store.  I know how to do dynamic VLANs based on AD group membership, but is it possible to dynamically assig...

Hi,I wonder if I need to go through "Lookup Server" and Mapping Rules" under "User Management  - Auth Servers", if am using AD for user authentication only. Once user got authenticated and postured assessed, then he will be placed on Access Vlan pre-...

I have an C4506 with a  WS-X4548-GB-RJ45V module. I am running version  Version 12.2(54)SG, I have implementet 802.1X on the access-ports but I can´t get multi-domain configuration to work.Mostly the PC-client is connected to the phone and the phone ...

I have tacacs+ configuration working for authenication against CLI and web GUI. Everything is working as one would expect with one exception, from the GUI if I click on the any of the links that takes you to the security pages I get prompted for auth...

We have ACS 5.1 up and running. Our company has a SuperCert purchsed with Thwarte so we requested a Certificate. Once we figured out the formatting we were able to successuflly get the certificate to bind to the CSR. For some reason our windows 7 use...