we have installed nac for our customer and it works fine ,but the customer want the change the version of kaspersky antivirus from 6 to 8 end point security ,when we have try this the nac agent does not find the antivrus on the the workstation . i want to know if this version of kasoersky (end point security ) is supported by nac ,if no is ther a solution to make it works with the NAC .
View 3 RepliesI have ran speed tests using speedtest.net whilst having my kaspersky internet security 2011 both enabled and disabled.With it enabled, i get download speeds of around 3MbpsWith it disabled, i get download speeds of around 12Mbps3Mbps is awful and loading webpages can take a long time sometimes. What can be done to resolve this problem?
View 3 Replies View RelatedI'm looking for Cisco ISE v1.1 to use the following licensing feature. url...Endpoint is dynamically profiled by Cisco ISE and assigned dynamically or statically to an endpoint identity group. Cisco ISE authorization rules do not use this endpoint identity group.
View 2 Replies View RelatedFound the internet not working after upgrade of versions. Managed a work around by disabling KAS2013 Firewall settings and using MS Firewall. (desktop)
This is not the correct way of config and as my laptop works fine with KAS2013 firewall enabled.
I checked system IP ...ipconfig settings and wonder about matching up gateways??
I can't seem to figure out which one I should go for. I'm thinking Kaspersky would have greater security but I'm not familiar with AVG's server level security.I don't need all the bells and whistles such as file encryption or password storage. I'm simply after a really strong AV for the server. Another one is VIPRE although I've heard it can take a while to configure it unlike Kaspersky which is pretty straight forward.
View 1 Replies View Relatedtrying to TS a VPN device that is behind an ASA basic set up is IOS VPN<firewall/nat<internet>ASA/nat>IOS VPN
I do not have a lot of insight into the other side of the connection, although the tech on the other side claims all is good. so to the point.
Is the asa capable of allowing this tunnel to work? The configs and debug follow.
1.1.1.1 = my public ip
2.2.2.2 = peer public ip
The asa -
[Code]......
Environment :AP 2602, WLC 5508 V7.4, ISE 1.1.2, Prime Infras 1.2
For a specific SSID, we use MAC address as 1 of the conditions to authorize access only for the company-owned mobiles (smartphones and tablets), the other condition being, for the mobile, to present a valid AD user/password;this way, the so-called BYODs are rejected since this is the rule within this company ;The difficulty with this approach is the fact that there is no way in ISE Identities Endpoints nor Groups to associate a user-friendly name to the MAC address of the mobiles, which makes very tedious some actions such as a search in the ISE authentication Log based on the MAC address value itself;the question is just to know if it is planned to add a new field in Identities Endpoints definition that would allow to associate a user-friendly name to a MAC address, for future ISE versions,
Yesterday work installed Kaspersky on my laptop and after trying to acess outlook and the internet today I find that although I have connection no internet page will dispay and outlook will not connect to the server.All other laptops/PS3 are working on the network except mine.Kapersky has been uninstalled, windows firewall has been turned off, various pings all returned a reply and all the settings are apparently spot on.
View 12 Replies View RelatedI have installed anti virus but it can't run. Is there any administrator rights.
View 1 Replies View RelatedI have got a laptop and Desktop both of them have windows 7 ultimate OS and both of them have Kaspersky Pure V9.1 0.124 ( b ).
At home from the laptop I can access a shared folder on the desktop with no problem
I tried to enable the access to the shared folder over the internet while the laptop away from home, by implementing a VPN. I have successfully managed to configure a VPN IPSec between home router DrayTek 2820Vn that acting as VPN server, and the laptop that has TheGreenBow VPN client.
Through VPN tunnel laptop can ping the ip address for the router and the ip address for home printer and the ip address for home desktop , all of those are located at the other end of the VPN tunnel.
And I can access the web interface for the router as well by typing its private ip address. On the laptop and through the VPN tunnel I tried to map the shard folder on the desktop (\desktopipaddressSharedFolderName) , but it didn't work!!!.
when I existed Kaspersky on the desktop , I was able ping the desktop and to map the shared folder which is hosted on the desktop
How can I configure Kaspersky to let the the shared folder to be mapped via VPN ?
One of my client want to upgrade its already installed ASA5540-bun-k9 by adding CSC-20 Module. As per below link CSC-20 is supported with ASA5540. but for any reason the ASA5540 bundle option with CSC Module is not available that create confusion.Will CSC-20 Module work with ASA5540-bun-k9 [URL]
View 2 Replies View RelatedMy company has started the migration from Windows 2003 to 2008 R2. Will my ACS Express boxes (currently running 5.0.1) ever have an upgrade option to work with 2008 R2? Do I need to trash the ACS Express appliances for some other solution?
View 3 Replies View Relatedi have asa 5505 adaptive security plus. and i have only 3 vlans . outside , inside , DMZ restricted.so it's working fine but i want to connect to my inside another private network, or do i need to buy License.and how i can activate the license key.
View 4 Replies View Relatedi have a seagate goflex home wireless hardrive and kaspersky PURE, and the only way i can get the hard drive to work is by turning off kasperky's firewall. is there anyway i can add an exception on the firewall so i can have it running and still have my wireless hard drive running at the same time
View 1 Replies View RelatedAs we know that WLC (i.e. 5508) does not support MAB (MAC Auth Bypass) and it supports CWA in 7.2.x. CWA is a result of successfull MAB. So how CWA work for wireless? So it means WLC support MAB?
View 5 Replies View RelatedI have a new BGP configuration that consists of two asa 5510 and two routers 2911 at the back. My question is : Does asa 5510 support BGP?
View 1 Replies View RelatedWhich IOS version of 3560-X switch support NAC-L2-IP ?
View 1 Replies View RelatedI have ACS 1120 appilance does it support ACS version 5.2.0.x and corresponding patches.
View 2 Replies View RelatedI have Some Alcatel Switch and I want to use ACS 5.2's tacscs+ for Alcatel Switch admin authentication.the Failure Reason:13011 Invalid TACACS+ request packet - possibly mismatched Shared SecretsBut I was check the share secret is correct.Before I was tried associated ACS with vision 4.2 is work.
View 12 Replies View RelatedHow Cisco Identity Service Engine (ISE) can work with WLAN controller 5508 to do the Local Web Authentication, on behalf tje guest profile is create using Cisco ISE guest management?
As i check Cisco ISE caveat wireless only support on LWA, and LWA not supported on Authorization's VLAN assignment.
what i need to concern abou the ISE authentication and authorization policy on behalf on Wireless LWA with use of ISE guest management case?
I am using ACS 5.3.I need to make macauthentication on Enterasys switch with Cisco ACS 5.3.I get the following error;
Parsing error or event type unknown:xxxxxxxxxxxxx ERROR RADIUS : RADIUS packet contains invalid attribute(s) ;Failed-Attepmt:Radius request dropped
How can I integrate Custom Attribute Enterasys A2 Switch with Cisco ACS 5.3 ?
Getting ready to order a SSL Certificate for my newly installed ACS 5.4 and before I did that i want to verify if ACS 5.4 supports Wildcard SSL's.
View 5 Replies View RelatedJust want to check out, does the non-Microsoft based OS client OS (Example: MacOS, Ubuntu, Android) support anyconnect v3.0 And also if my RADIUS server is host using window server 2008 Network Policy Server (NPS) component, can this doing the 802.1X authenticating?
View 1 Replies View Relatedi want to know if the new Catalyst 3750 Support Private Vlan ?
or any other small Switches
I recently got a refurbished external (USB) wireless adapter by Netgear. It's the WNA3100 but who knows what they did to it while refurbishing it.
I tried using it to connect to the wireless network at my university, and I got the above-displayed error. So what's the deal? This RADIUS thing is not a new technology, right? So any modern wireless adapter should be able to handle it. Why would this thing not support it?
Secondly, if it doesn't work, that's alright. I need a second wireless adapter anyway, so I could use this one at home where the RADIUS thing is not an issue. But how do I make sure this does not happen again with another one that I buy? I can't seem to find anywhere in the specs anything about this compatibility. For instance, I believe I want to get this one next:URL
Is the ISE going to support the 2500 series Wireless LAN Controller WLC? If yes in what release and appriximately when is that due to be released?
View 1 Replies View RelatedI'd like to configure ASDM access to ASA-SM using RSA SecurID authentication.I've followed instructions in this documen [URL]When I test access from CLI everything looks fine:
asa-vss/admin/act# test aaa-server authentication RSA
Server IP Address or name: xx.xx.xx.xx
Username: testuser
Password: **********
INFO: Attempting Authentication test to IP address <xx.xx.xx.xx> (timeout: 12 seconds)
INFO: Authentication Successful
[code]....
When I try to use ASDM, I'm unable to login and I can see lot of authentication error (Token reuse) messages on RSA server monitor window.It looks like ASDM 6.5(1) for ASA-SM doesn't support RSA/SDI authentication.
is it possible to use wildcards in Compund Conditions in ACS 5.2? i've been suing the following to try and match a username that contains @*.*:
This would hopefully match a username like j.blogs@somewhere.com but doesn't work as expected - am i doing something wrong or are wildcards not supported in compund conditions?
one of my router are scanned by Foundstone and get an alert :
""The SSH2 protocol specification requires that a SSH2 server support the diffie-hellman-group1-sha1 key exchange algorithm. This key exchange algorithm is considered strong, but faces a potential weakness in that the same prime number is used for all key exchanges."
SO wanna check if cisco SSH2 can support the diffie-hellman-exchange-group-sha1? If yes, which IOS version required?
We are running ACS 4.0 so understandably so we are looking to upgrading to a Cisco supportable version of ACS. The limitation of our current version of ACS does not support nested AD groups. The latest version of ACS (I think it is 5.4) will?
View 1 Replies View RelatedWhether ISE-3315-K9 with ise version: Service Engine: 1.0.4.573 , supports the command level accounting
Bascially , we have integrated Cisco Switches with Cisco ISE for Device Authentication using Radius , we are able get the authentication logs on to the devices , but for any command changes or update done on Cisco devices we are not able to get the command accounting.
Critical voice vlan feature, used to place a newly authenticating phone when radius server is dead into appropriate voice vlan, seems to be a new feature and I find the documentation to be incomplete. Do the following switches support this feature in any IoS versions? WS-C4510R, 4506, 3560, 3550,2960s.
View 1 Replies View RelatedI'm looking to implement ACS 5.2 using 802.1X, we have two seperate AD domains.A single switch will need to support both ADs, so if a machine in AD1 is connected, it will be authenticated to the ACS using AD1 and applied to VLAN1, while a machine that is in AD2 will be authenticated to AD2 and applied to VLAN 2.
I'm looking at machine authentication, not user authentication, so I assume that I will need to import two certs from each AD.