Network Access Control

Within our production policy for sanctioned wireless we have existing anti-malware conditions that check to make sure Symantec Endpoint Protection version 12.x is installed and that virus definitions have been updated within the last 45 days.   Our d...

Hello Team,I had a query on two factor authentication on LAN, can this be achievable on LAN. The requirement is to have the following-- When the user connects his laptop on LAN, he should authenticate using his domain login and he should be prompted ...

Hi Team,We have a customer with large ISE deployment with around 300K end points. The cluster has 47 PSN's and is running ISE 1.4.Customer has started observing alarms on ISE with profiler queue size limit being reached for around 6-7 PSNs. Currently...

Hi all,just to be sure;: If customer is using RADIUS for login into switches/routers etc. to manage them instead of tacacs+, every management session will consume one BASE license.Am I correct with this?Roland

I was just asked by my security folks if it is possible to have ISE/TACACS+ use both RSA and Active Directory authentication.The ask from the Security team is to have any device that uses ISE for authentication to challenge for:- AD User ID and AD pa...

HiIn Cisco ISE 1.4, when the ISE profiles an endpoint and if the endpoint is disconnected after a while, will ISE retain the endpoint's MAC address in profiled database until unless it detects a change in the profiling information from same MAC addre...

Hi,I am checking the documentation for TACACS licensing in the configuration guide and this is what is says for TACACS:Cisco Identity Services Engine Administrator Guide, Release 2.1 - Cisco ISE Licenses [Cisco Identity Services Engine] -…Device Admi...

We have a Cisco 2500 controller with an external RADIUS server set up to handle authentication through WPA2/EAP-TTLS/PAP with a search against a LDAP database.    When we set up the RADIUS authentication server and try to connect, Every request it se...

Hi,Should we consider a Anyconnect (FTD) user authentication as an active session??Customer will have 3000 VPN endpoints terminating in a Firepower, the authentication is against Cisco ISE.Will posture be supported soon in Anyconnect terminating in F...

Can we check client's DNS and proxy settings with NAC agent or Anyconnect, and decide to allow the client if these settings are configured as compliant to corporate policy? If not, redirect to a page which says uncompliant DNS and proxy settings are ...

Is there a compatibility matrix for ISE and Splunk integration?  I am running ISE 2.3p1 and Splunk 7.0.1 and cannot get the pxGrid connection to come up.  The Splunk pxgremediate.log indicates that it cannot read the truststore.  I have verified the ...