Network Access Control

I'm trying to configure ACS for use across 2 domains (let's say "business.com" is one and "company.com" is the others) for logging into network devices and POTENTIALLY wireless, and need a bit of help/suggestions regarding configuration.   I know tha...

Hi *,   I have a little theoretical question. I own some internal Servers which are currently opened to the internet with an ACL and over NAT Ports. Normally this is not a problem, as the servers are secured by strong authentication mechanisms.   But...

Hi; I configured single standalone ISE 2.2 in my lab to authenticate clients and push them to install AnyConnect NAM, VPN and Compliance modules. Clients successfully authenticated and redirected to the provisioning portal. then they managed to insta...

Dears, Plz, I wanna the standard command that allow users to read-only from the ROUTER and ASA. For more details, config)username blabla privilege 10 secret blabla. so the config must link with the privilege 10 ..thanks 

Hi there,   I am trying to create a policy set using a condition that contains identity groups however, ISE is not giving me that option. I meant, I dont see any option where I can use identity groups as condition in the policy sets using the conditi...

Hello, everybody,   I have an office where ASA 5508 on the edge and users are allowed to browse Internet after they've logged with their AD credentials. Everything works fine, except one thing:   Some users work with laptops connected to wired networ...

Hi everyone! I`m trying to configure AnyConnect with downloadable ACLs (with ACS) on Cisco router. But I have some problem with it. I`m using: Cisco 3925e - c3900e-universalk9-mz.SPA.152-4.M5 ACS - v4.2 I created Downloadable ACL for user on ACS, and...

Hello,         we have ISE 1.4 patch 4 , suddenly all switches in WAN can't download DACL and then put the use in Authz failed. this issue didn't happened in LAN. Also we tried to decrease the lines of ACL to 22 lines and then it is working , but it ...

Hi Everyone,    Got an interesting one that I'm hoping the community might be able to help with.    I'd like to be able to take TACACS requests to an ISE instance and if the username starts with "abc." proxy those requests to another ISE server while...

Dears,          I have ISE server and I am using dot1x to authorize users based on LDAP group. I want to make a double layer of authorization. When the user plug the network cable to the PC the PC should be authenticated and authorized as a domain ma...