Network Access Control

Hello, I'm working on an ISE deployment and I have couple of issues that I'm encountering. Maybe someone have see similar issues before.    1-All of a sudden certain windows machines stop doing dot1x and revert to MAB until a GPO update is forced, or...

Hello,   Can someone elaborate me, how to find the machine as Corporate Asset based on DHCP user class id. I understand that we have to set the class id like ipconfig \setclassid "Ethernet" Myclassid . I would like to understand, what are all changes...

Hi, Can someone please advise me on the following.... I need to reset the administrator CLI password on an ACS 5.7 system runnning on a Cisco 1121. I have gone through the process of booting it from the recovery CD but when you get to the option of r...

Customer is planning to use 50K devices for TACACS & they would generate about 4 GB logs/day. We are positioning SNS-3595 in centralized deployment with HA. How much is the total log retention capacity for SNS-3595 in real world scenario? Is it good ...

In self-registration portal, there are person to be visited (Sponsor's email) and visitor email column.  However, there is a request in my site where the sponsor does not want to the approved email to be sent directly to the Guest.  The want the emai...

Hi  everyone,   I have a issue that is about acs,these days,our acs occur a alarm is "Physical size of ACS db is more than 50% of its Actual Size". I think it's bug CSCum51180,and i want to enter "acs-config" in CLI,to confirm acs database.But,when i...

We will be updgrading from 4.x to 5.x and need to verify if any needed ports will have to be alllowed through the firewalls. Is there a list of required ports somewhere, I have searched but am coming up empty-handed.thanks-

Is the single click self-registration link that is sent to sponsor in the email PSN specific?  I mean can any PSN process that link?   I have a two node deployment where the sponsor portal has an FQDN, sponsor.mycompany.com.  We have A records for sp...

Hi,    I have a scenario where I wanted to configure ISE as acting as external webauth server for my wireless lan controller. As of now I am able to configure wireless controller  with portal url present in ISE but still I am facing redirection issue...

I have created local users on ISE for device administration. Do I need to change their password at regular interval ? If yes , what is the default interval ? And how can I change that default password expiration interval?

I need to configure a specific portal to allow password change for defined identity group. This users cannot create any guest so I would like to customize one portal in order to show only change password module only.Is it possibile?

HI everyone,we have met a problem,that is about database useage,we can issue "acsview show-dbsize"command in acs-config mode,but we cannot see any output about database.So,i want to know whether there will cannot login ACS in case the database full？A...

Hello All,   I recently installed ISE 2.2 in virtual distributed mode (2 PAN and 2 PSN), I hit the bug implementing Flex ACL using WLC, and TAC suggested to upgrade WLC code and also the ISE code to 2.3 to be compatible with new WLC code :(, kindly s...

Hello all,   I authenticate my switches over an ISE acting as radius server.   When I connect with ssh, everything works well. My radius server return priv15 and I am logged directly in privilege 15. But the weird thing when I try to connect through ...