Network Access Control

Background:My customer has raised a question based on a vulnerability raised by their security team on TACACS+.  The actual audit point was that there is “no integrity checking available and the use of MD5 encryption”  This issue was this raised as p...

Hello, what would be a good authorization rule to authorize PCs to be imaged. They’re not on the domain and they will be applied a dacl that gives access to the imaging server and internet only. I’m trying to distinguish it from the default authoriza...

Hi, have set up ISE so it will dynamically assign vlans based on users and user group, but ran into a problem with devices that do not have 802.1x   Is there any way where users could log into their device portal and add their mac address and have th...

Hi team,I would like to know if the following implementation can be done on ISE:  *   Guest opens self-register portal and already sees the fields that he has to fill in  *   Guest fill the fields and clicks register  *   Username and password is sen...

Hi All,Got a query regarding ISE Self-registration portal and sponsored portal.We are integrating ISE with Meraki AP and customer would like to have Guest self-registration  for APs in certain sites and follow sponsored guest access for APs in differ...

I have ISE 2.3 with latest patch. Has anybody run into this issue.  I checked and I do have A and Pointer records created in DNS. I have the certificates installed in the Trust store. Thanks,Alex

I have some data purging setup to automatically purge devices when they are inactive for so long.  I would like a report that will show me a list of statically profiled devices that are coming close to being purged or have not logged into the network...

Hi,We're implementing ISE posture with AnyConnect VPN. In the uknown state dACL we had to allow quite a few ports to our domain controllers to get Microsoft NLA (network location awareness) to work, which makes it a bit less secure. Still very secure...

For devices joining wired/wireless we can authenticate and authorize. My guess is that we could use Anyconnect NAM to deploy on builds they control but if someone were to try to deploy a guest OS with NAM they'd want to block it's access.

Dear community,I'm looking for ISE to remove sensitive information from the output of certain commands. For example, when issuing a show run command, I want to remove (or replace with *) all lines containing the word username and all lines containing...

Hello,I'm a beginner, I'm working on Cisco switch 2960s, and I need some advice about authentication methods to access the LAN (and not the switch).I have a set of vlans that can be divided into two subset according to the authentication methods.In t...

Hello,I've received a request from someone whose goal is to be able to set  "Disable user account after  X days if password was not changed" only for internal users with the password type "internal users".Customer also has other internal users with p...

Hi,is there any comparison list for the advatages of AC NAM versus the windows native client?there is no specific requirement i just would like to know the pro and the cons.thanks,