Dear Team While auditing several access lists on the firewall, we need to check exactly those logs that have been matched against a specific ACL entry, for example in the end of my access list i have a statement permit tcp any any log informational ! ! There are many hits against this entry and i want to see the logs specific to this entry, so that i can create more specific rules for those connections. I tried with both CLI & ASDM but no luck. Any response will be highly appreciated. Thanks Ahad ... View more

Dear Team Please address the following queries related to Ironport. Query 1: how we can see the queue status in Ironport and manually clear it (if possible). System capacity only shows queue size. There are instances when ironport shows many message in queue and system admin wants to check them.. Query 2: for incoming default policy, for positive spams, we have the following 4 mutually exclusive options, of which only 1 can be selected. Drop Deliver Spam Quarantine Bounce is it possible by any means that both Drop & Spam Quarantine options can be selected. the feature exists on the existing email gateway. Any inputs will be highly appreciated. Thanks Ahad ... View more

Dear Team I have a very basic question -  When a new end device connects (Printers or even a PC), what is the profiling result ISE assumes for it. before reading all the probes. is it "Unknown" in authentication logs, profiling results are not visible, where i can check the profiling done for the end host. I have various new printers set for DHCP and none of them taking the IP address, my rules are standard rules... if (Wired_MAB) & (Profiled or unknown)  = Network Access, but is not getting hit and session hits the final rule. Final Rue - Deny Access Any inputs will be highly appreciated.Thanks Ahad ... View more

Dear Team We have ISE 1.4 (SNS-3415) deployment. Wired 802.1x + Posture is working perfectly fine for Windows 7 Machine and we have rolled out around 50 Workstations, however users with Windows newer versions like 8.1 are having issues with this setup, it undergoes 802.1x authentcation, but unable to find Policy Server Nodes, it keeps searching for the PSN and eventually timed out. Probably is there any patch for Windows 8.x from Microsoft that can come to the rescue. Any inputs will be highly appreciated. Thanks Ahad ... View more

Dear Support Team We are facing a strange issue. Wired 802.1x is deployed using both machine & user authentication. All the machines are in domain.now on PCs, user authentication & authorization is happening successfully when user logs in with his username/password.  Since user has no admin privileges, sometimes administrator has to login to install some software, here we are facing the issue. when System admin logs in with Administrator(defined on  Active Directory) username/password , user could not login and the following error message is displayed. " No Windows Logon Servers available to process this request" however if 802.1x configuration is removed, everything is back to normal. here is the ACL on the switch port. (Default Access) permit udp any eq bootpc any eq bootps permit udp any any eq domain permit udp any host 10.0.x.100 eq 8905 permit tcp any host 10.0.x.100 eq 8905 permit tcp any host 10.0.x.100 eq 8909 permit udp any host 10.0.x.100 eq 8909 permit tcp any host 10.0.x.100 eq 8443 permit ip any host 10.0.x.19 (Domain Controller 1) permit ip any host 10.0.x.21 (Domain Controller 2) permit ip any host 10.0.x.23 (Domain Controller 3) permit ip any host 10.0.x.13 (Anti Virus Server) Permit ip any host 10.0.y.72 (Remediation Server) ! ACL used for redirection IP access list extended ise-redirect deny udp any eq bootpc any eq bootps deny udp any any eq domain deny udp any host 10.0.x.100 eq 8905 (ISE) deny tcp any host 10.0.x.100 eq 8905 (ISE) deny tcp any host 10.0.x.100 eq 8909 (ISE) deny udp any host 10.0.x.100 eq 8909 (ISE) deny tcp any host 10.0.x.100 eq 8443 (ISE) deny ip any host 10.0.3.13 (AV Server) deny ip any host 10.0.3.19 (Domain Controller 1) deny ip any host 10.0.3.21 (Domain Controller 2) deny ip any host 10.0.3.23 (Domain Controller 3) deny ip any host 10.0.50.72 (Remediation Server) permit ip any any ! 802.1x Configuration on the switch port. interface FastEthernet1/0/37  description MAC .2bd2  switchport access vlan 50  switchport mode access  switchport voice vlan 4  ip access-group NRA in  authentication event fail action next-method  authentication event server dead action reinitialize vlan 50  authentication event server dead action authorize voice  authentication host-mode multi-auth  authentication order dot1x mab  authentication priority dot1x mab  authentication port-control auto  authentication violation restrict  mab  snmp trap mac-notification change added  snmp trap mac-notification change removed  dot1x pae authenticator  dot1x timeout tx-period 10  spanning-tree portfast end ! Any inputs are highly appreciated. Thanks Ahad ... View more