Network Access Control

Cisco Access Control Server (ACS), Identity Services Engine (ISE), Zero Trust Workplace
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

Labels

Forum Posts

Hi,   I have the below questions regarding REST API.   - Does REST API support TLS 1.2 ? - Is it possible to log REST API calls ? - Is there Role Based Access for API ? Allow only GET calls for some accounts and PUT for certain - External authenticat...

umahar by Cisco Employee
  • 793 Views
  • 4 replies
  • 0 Helpful votes

Hello,   A customer has a guest CWA portal with auto redirect to www.google.com on success. However, they are running into a corner case with Android endpoints, where an Android smartphone starts trying to reach google.com too quickly, when the CoA h...

Resolved! SSH2 issues

Any idea how to resolve this? I can't seem to ssh into the router, and consoling in yields the following error message.Running cat4500e-entservicesk9-mz.151-1.SG.bin on a 4948.  *Dec 31 17:32:39 PST: SSH2 0: input: padlength 6 bytes*Dec 31 17:32:39 P...

debottym2 by Level 1
  • 8903 Views
  • 2 replies
  • 0 Helpful votes

Hi, Hoping someone can help. I'm currently working through a pxe boot and automated computer building setup.Once the OS is built and joins the domain, it is unable to authenticate without a reboot some 15mins later. This appears to be because the com...

Resolved! TrustSec

Hi; I have configure ISE TrustSec with IOL Switch image. After showing error on ISE, below is the error log: 11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute Anyone can help me on this regards.

Looking for some sort of guide in how to set up a new admin account (or maybe modify the Helpdesk Admin),So that when they get a call from a corporate user that is being blocked.  They can add the device to the Temp-Whitelist and then have the deskto...

Hi,   I have a customer who doesn’t have on-prem user directory and CA. They are very much interested in ISE. However, the challenge is to have dot1x authentication.   Can we use certificate based authentication for dot1x and configure ISE to act as ...

raksec by Cisco Employee
  • 2673 Views
  • 14 replies
  • 0 Helpful votes

Hi, My customer needs to upgrade their distributed ISE deployment from ISE 2.3 to 2.4. They say that the upgrade time described in our upgrade guide requires very long maintenance/downtime windows: https://www.cisco.com/c/en/us/td/docs/security/ise/...

helalaou by Cisco Employee
  • 960 Views
  • 2 replies
  • 0 Helpful votes