Network Access Control

Much like the SNS-3515 which does not come with a redundant power supply, is there a specific part SKU to add a PSU to the SNS-3615?  Is this supported as long as it is not shipped back with an RMA?   Pretty much the same discussion as this thread bu...

Hello Team,   Working with a customer who wants to deploy Meraki wireless authenticated with 2FA using their current Azure MFA. I see two options and wondering if you could help clarify any caveats, limitations or alternatives. I have worked with 2FA...

Hi,We reimage our ISE, but unfortunately we only backup the certificate without the private key.Now we want to import that certificate but a private key is required.Is it possible to upload the old certificate without using the private key? We are us...

An organisation I work with is building what they refer to as a ‘Pluggable Architecture’.  After some initial research, they found technologies such as PxGrid, ICDx (Symantec), OpenDXL (IBM/OSA) & other open source message brokers as potential founda...

Hi! I am looking at upgrading ISE from 2.4 to 2.6 and wanted to know what the recommended patch would be in 2.6. Ideally I am looking for the patch with the least issues in terms of 802.1x auth using the native windows supplicant and tacacs authentic...

Hi I used cisco SG300 switches as access switch and I trying to use cisco ISE as NAC, I have configured the switches and the ISE, the authentication and authorization works for the Active Directory users, but the Guest web users authentication doesn'...

I am on ACS 5.8.0.32.6, I followed instructions as below for ACS Password Recovery https://community.cisco.com/t5/security-documents/acs-5-x-cli-password-recovery-procedure/ta-p/3125810 Tried boot both from KVM, and Console. It did take the new passw...

We have a working ISE deployment with AD Integration. Authentication works correctly, however the AD!- ExternalGroups-EQUALS-XXXXXX Is not matching on the policies in the TACACS policies.  It was a migrated configuration which worked correctly in ACS...

Hi Experts, I want to restrict few commands on Router/ Switch in config mode. means for some specific group. I want they can do normal config , but will not be able to change other sensitive config like enable password, line vty, aaa etc. I tried it ...

So I have been looking at alarms and identified that "Unknown SGT was provisioned" alarm could be used as security audit to log endpoints which hit Default Policy and instead of just sending Access_RejectAccess_Accept  along with Unknown SGT is sent ...

One of my customer's Apex licenses are up for renewal on 15th of Oct 2020. Need confirmation on the following: Can they renew their Term Base Plus/Apex Cisco ISE licenses on the Version 2.3 (which is EoS)?  Is it possible to receive an add-hoc suppo...