Network Access Control

HiI am unable to figure out how to enrich the Access-Reject reply with additional Radius attributes in a particular use case - I am looking up the Guest User identity store and if the user is disabled then I want to return a custom Reply-Message to t...

Hi,   Is it possible to configure any posture policy to detect and prevent connection of endpoints Dual-Homed. We would like to have a solution with a temporal agent for posture to prevent Dual-Homed stations connected to network. Any suggestion ?   ...

Hi,   I am under consideration of enabling profiling along with dot1x in our enviroment. However i have couple of questions regarding how actually profiling would work.   What are protocols allowed before 802.1x authentication. Are they CDP, STP, EAP...

Looking for a best practice or reference guide to share with a customer regarding centralized vs. distributed PSNs.  The closest guidance that I've found is from the Cisco ISE For BYOD And Secure Unified Access book.  Thank you!

Hi!   This discussion and doc show how Microsoft SCOM could monitor the hardware ISE nodes: https://community.cisco.com/t5/policy-and-access/ise-management-pack-for-system-center-operations-manager-2012/td-p/2464102 https://www.cisco.com/c/en/us/td/d...

Guys, I have a laptop domain managed and I'm deploying Cisco ISE 2.4 on the network. The laptop is connected to a Catalyst 9300 switch. I'm running Wireshark instance on the laptop. I noticed the laptop send the EAPOL-Start packet three times with no...

Hi all,   We have a customers who wants to use profiling of 2802I AP´s in ISE. But it appears there is a difference between real life CDP info on switches compared to what we provide on profiling feed.   CDP info gathered on switch: 800 AP cdp info f...

Hi,   Can anyone tell me if it's possible to have a guest user enter an email address on the Guest Portal page when they accept the AUP? The customer wants the guest SSID to be open with no authentication, however would like to prompt for email addre...

Hi!   I have a question regarding the capabilities of PXGrid 2.0 and whether or not they will be able to meet the requirements of an upcoming customer project, or if we will need to utilize PXGrid 1.0.     The customer has chosen to use forescout as ...

The advisory states that this latest vulnerability is addressed with 2.2 patch 12.   Any date for when the patch will be posted?

Hello, I'm working on an ISE deployment and I have couple of issues that I'm encountering. Maybe someone have see similar issues before.    1-All of a sudden certain windows machines stop doing dot1x and revert to MAB until a GPO update is forced, or...

Hello,   Can someone elaborate me, how to find the machine as Corporate Asset based on DHCP user class id. I understand that we have to set the class id like ipconfig \setclassid "Ethernet" Myclassid . I would like to understand, what are all changes...

Hi, Can someone please advise me on the following.... I need to reset the administrator CLI password on an ACS 5.7 system runnning on a Cisco 1121. I have gone through the process of booting it from the recovery CD but when you get to the option of r...