Network Access Control

In the "Guidelines for Configuring IEEE 802.1X Multidomain Authentication" (https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/5700/sec-user-8021x-xe-3se-5700-book/sec-ieee-mda.html)it says: MDA allows both a data de...

I am using 802.1x but I am able to spoof a printer port using my laptop. It was suggested that I try using IP source guard. Has anyone used IP source guard to address spoofing?

Hi, Using ISE 2.4. When downloading certificate chain from the certificate provisioning portal the certs are compressed to a .zip-file. It seems it is always a zip-file no matter what OS-template I am using. This is a bit problematic since not all OS...

Hello, On my switch, I have all the switchports configured with ISE- 802.X. My question is how can I secure the interfaces that belongs to a channel-group ? Someone can easily unplug the port and plug in any device, and since there is not security on...

Meraki mr33 version 27.4 integration with ise version 2.7 patch 2 When trying to authenticate Guest access, this is done without problems, but when redirecting through CoA, the following unsupported attribute error occurs.All photos referring to the ...

So we're doing machine and user authentication, which is working perfectly, but now i want to know which best practice regarding access restriction to implement after only machine authentication has taken place.So the user booted his PC, but didn't l...

Hi everyone, So I got a question from a client about how remote users who choose to connect to their cloud/Internet by "by-passing" vpn and basically also by-passing ISE can still be protected and have their data protected too? Can we enforce a polic...

We currently use ISE for our anyconnect users. Depending on the user configuration and due to an infosec requirement we need to create an individual AuthZ profile with its own DACL and a new rule in a policy that essentially identifies the user and a...

I am trying to get a dynamic variable to work using information under the network device.  I can't seem to find a combination that works.  I know how to manually set a VLAN assignment using RADIUS custom attributes (Tunnel Private Group ID, Medium Ty...