Network Access Control

Hello, While registering the secondary admin node to  Primary admin node, the node registration is failing after few hours of syncing. We reached TAC and they found that the secondary node is not able to connect to primary node on TCP port 12001 afte...

Hello,  does anyone have any suggested configurations, ACLs, etc for securing printers, especially HP and giving network access to just their essential functions only?  All replies rated,  Thanks in advance!

Helloi'am using ise-pic to provide session information to Firepower management center, i can create policy on firewall for a specific user/groups on AD if the sessions for users are create on DC. But when user switch to wireless network without estab...

Hi all,if there option for ACS 5.8 to have access on web via two different interface IPs?My ACS 5.8 now have only one IP configured, and that one is used for AAA comunicatuions  as well as for mgmt access.It's install on VM machine and I added anothe...

After impingement fast roaming, we only get session logs for client devices after the first authentication, Is it possible to send that to an external Syslog server?  I do not see any information related to session under the logging category. We stil...

What is the best way of profiling machines running different version of Windows? Nmap sometimes give false positive and the user agent can also be modified.Dhcp probes /device sensor too is not helping that much or maybe am just missing something in ...

Hi, Do I need to use agent in PC when configuring monitor mode in switches? 

In an effort to avoid some looping MAB authentications, which I need to have do at least two authentications, I have created a custom endpoint boolean attribute that I assign "True" or "False" to and match against in multiple MAB Authorization Polici...

Hi, I am experiencing a weird problem with Aruba Wireless and Cisco ISE integration that if I write my client provisioning policy as Domain users AND Domain computers AND SSID Name  then redirect to the client provisioning portal the client does not ...

Hi,   In the past, I encountered a manifestation of the bug in the title, where AnyConnect would display a certificate warning due to the fact that ISE was using the system certificate for HTTPS on port TCP/8905 (part of the ISE posture evaluation). ...

HelloCould please someone suggest how to get session list with domain names by API?Our ISE is configured for getting passiveID from two DC . When I read session list with the requesthttps://ise/admin/API/mnt/Session/ActiveListI get only usernames and...