Network Access Control

Cisco Access Control Server (ACS), Identity Services Engine (ISE), Zero Trust Workplace
Showing results for 
Search instead for 
Did you mean: 

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.


Forum Posts

Resolved! Authenticate from NAT outside endpoint

I want to confirm if it is possible to authenticate from NAT inside endpoints but also from outside endpoints(which have Global IP address).It seems to work if ISE is Static NATed, but is it supported structure?                                       ...

azhakama by Cisco Employee
  • 2 replies
  • 0 Helpful votes

Resolved! Creating device policies

Friends, I want to create policies so that certain devices can not connect to a specific SSID. For example that the devices android, apple can not connect but if devices with S.O windows in all its version. The policies I want to create on the ISE 2....

Resolved! ACS 4.1 eval before migration...

Hi experts,I have just received this from the partner:'We have a critical case with Vodafone Egypt, they have a deployed Cisco ACS 4.1 but now it’s down due to hardware failure, they need to deploy a Cisco ACS virtual appliance as a temp solution til...

paulturn by Cisco Employee
  • 3 replies
  • 0 Helpful votes

2960XR vs 3650 TrustSec Support

Hi All, I’m in the process of recommending edge switches for the campus network I manage.  I’m considering 2960-XR and 3650.  We have ISE and hope to use it to control intra-VLAN movement with the new switches. I’ve never implemented TrustSec or SGT ...

Tim Glen by Cisco Employee
  • 3 replies
  • 0 Helpful votes

Resolved! 2960 Plus -- subnet to SGT mapping

Hello Team,I see 2 contradictory information and I am reaching out to you to confirm  which one is correct:In the below recommended 2960 Plus release note (15.2.2E), they mentioned in the restrictions:"You cannot statically map an IP-subnet to an SGT...

erameh by Cisco Employee
  • 2 replies
  • 0 Helpful votes
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers