Tag: NAC

Prior to version 4.7.1 Cisco NAC would only support DES for Kerberos.  This affected the Kerberos authentication type and AD SSO authentication type.  With version 4.7.1, NAC started supporting negotiation of the encryption authentication that was used with NAC.   According to the 4.7.1 release notes, NAC can now "negotiate any…

Before version 4.6, the Cisco NAC Agent used registry key settings to for configuration.  Starting with version 4.6, the Cisco NAC Agent uses an XML file for configuration.  This file is located in c:Program FilesCiscoCisco NAC AgentNACAgentCFG.xml.  This configuration file provides many options for customizing the behavior of the NAC…

This troubleshooting tip pertains to environments that use Cisco NAC in L3 OOB mode and use the Windows Firewall for end computer protection.  In this scenario, a problem could occur where the Windows Firewall incorrectly uses the standard profile when it should be using the domain profile.  This could cause…

The Cisco NAC subnet filter is used to allow computers to bypass authentication and optionally perform posture assessment.  The optional posture assessment is based on the role that is assigned to the subnet filter.  These subnets can be added through the NAC Manager Web GUI or through the NAC API.…

SNMP is one of the key technologies used in out-of-band Cisco NAC Appliance deployments.  The NAC Manager sends SNMP GET commands to the access switches to learn about the switch port configuration.  The NAC Manager also sends SNMP SET commands to the access switches to change individual switch ports from…

    When deploying Cisco NAC for desktop computers, it is imperative minimize the impact to the end user experience as much as possible.  This helps to ensure that the NAC deployment does not get derailed by user complaints.  One way to minimize the impact is to implement Active Directory…

OMB has mandated the Federal Desktop Core Configuration (FDCC) security configuration.  NIST has a detailed set of configuration settings in an Excel spreadsheet that can be downloaded from http://fdcc.nist.gov.  I'd like to provide an example how Cisco NAC can easily help to enforce the FDCC security configuration for a Windows…

The NAC API provides a method of inputting configuration into the NAC using a Perl script instead of typing it in manually. This is really nice if you have a large number of items to add or if you want to automate a particular process. One example would be to…

Cisco NAC version 4.1.8 has been released. The release notes spell out the changes.The general NAC Manager/Server enhancements are CAS Fallback Behavior Enhancement CAS HA Pair Link-Detect Configuration Enhancement DHCP Failover Behavior Enhancement Additionally, there are number of agent fixes. Posted by Rob Chee

Chesapeake Netcraftsmen hosts the monthly Cisco Miad-Atlantic Users Group (C-MUG) meeting. Last month we had a presentation on NAC Architectures and on Troubleshooting ASA. You can view the presentation slides at the  C-MUG Archive. Posted by Rob Chee

On Jan 15 and 16, Chesapeake Netcraftsmen will be hosting the Cisco Mid-Atlantic User Group meeting. For more details, go to our Cisco Mid-Atlantic User Group page.Below are the speakers and topics:

Microsoft Windows Server Update Services (WSUS) provides a method for managing Microsoft updates for company computers. Within a company, there are one or more WSUS servers that gets updates from Microsoft. Computers, within the company network, check in with this WSUS server to get their Microsoft updates.