ISE 1.1.2 - Agent Customization Package

Hi there
I have created a NAC Agent Customization Package and sucsesfully uploaded the 'custom.zip' file to - Policy>Policy Elements>Results>ClientProvisioning>Resources.
However, when I try to edit my Client Provisioning Policy and select AgentCustomizationPackage, my custom package dosn't appear on the drop down list, so i'm unable to select it!
Anyone any ideas?
Cheers
Tim

Hi Tim,
It is possible to us Agent Customization Packages using temporary "Update Feed URL" in "Administration" --> "System" --> "Settings" --> "Client Provisioning". If you use attached file as example the "Update Feed URL" will look like http(s)://fqdn/provisioning-update.xml
You may use attached files as example, this one includes the Cisco logo.
Regards, Jan-Willem Molenaar

Similar Messages

  • NAC Agent Customization Distribution

    Looks like the NAC agent customizations can be done only when the client PC pulls
    the install from the CAM. Our PCs do not have admin rights and the software will be pushed through a software
    distribution tool. Is there any way to distribute the software with the customization file , just like there is an option
    to install with the agent configuration file?
    Thanks
    Shaffeel

    Hi Shaffel,
    You cannot include the branding files on the MSI installation package of the Agent.
    I have not much experience with the centralized client management tools, but you could try a workaround by pushing those files to the client at the appropriate location and then restart the Agent.
    The files to be pushed are the ones you prepared on the branding file to be uploaded to the CAM.
    The location of the files is documented at this page:
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_agntd.html#wp1606140
    Specifically:
    In  a system that has NAC Agent installed, you can find the "nac_login.xml"  file in the "C:\Program Files\Cisco\Cisco NAC Agent\UI\nac_divs\login"  directory.
    The "nacStrings_xx.xml" file is available in the  supported location. The "xx" indicates the locale. In the system that  has NAC Agent installed, you can find a complete list of the files in  the "C:\Program Files\Cisco\Cisco NAC Agent\UI\cues_utility" directory.
    The  files are available in the directories mentioned above when the Agent  is installed at the default location. If the Agent is installed at a  different location, then the files would be available at "\Cisco\Cisco NAC Agent\UI\nac_divs\login" and  "\Cisco\Cisco NAC Agent\cues_utility".
    I hope this helps.
    Regards,
    Federico
    If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

  • Netinstall - Trying to Customize Package Selection

    I am trying to create an image of Leopard (client) to do NetInstall's so I can upgrade a bunch of laptops around our school. I would like to make the process automated, but when I add "Customize Package Selection" to a workflow, no packages show up in the window. I'm probably doing something wrong, but I can't figure out what it is.
    I am creating this image from a Leopard DVD and using a Leopard equipped Macbook to create the image. I will move the image over to a Leopard equipped Xserve once I have it created.
    Thanks for any help you can give.

    Same problem here... but I am using an ASR image instead of the 10.5 DVD. I am not able to create a NetInstall image that includes packages on my 10.5.4 Server. I reapplied the 10.5.4 combo update just to be sure I was not missing something but, alas, still no workflow.
    You may wish to use Automator instead to handle the package distribution.
    Sorry, not what you wanted to hear.

  • Cisco ISE 1.2 Guest Portal customization with vWLC redirect

    Hello Support Community,
    we have a problem regarding customized web authentication on ISE 1.2 with Package ISE12CustomPortalPackage-v4.zip. We have a Virtual Wireless Controller where we do a redirect to ISE. When we use default guest portal on https://x.x.x.x:8443/guestportal/Login.action authentication and authorization works fine. When we do redirect to Cisco templates on https://x.x.x.x:8443/guestportal/portals/example/Login.html customized login page is displayed and after correct authentication guest successful page is displayed but we can't go to any webserver although ISE shows authentication and authorization as successful. When we try to reach a webserver after successful authentication we get redirected to customized login site. Virtual Wireless Controller shows client aus "Webauth Required" after successful authentication. Central Web Authentication isn't possible because we have a different AAA Server for 802.1X and only use wired guest access on a particular VLAN from WLC. Are there any known issues regarding customization template or is there something wrong regarding our redirect?
    I hope somebody can help us.
    Best Regards
    Benjamin

    Hello Neno,
    1. I attached screenshots below.
    2. There is nothing related to this client.
    3. I attached Debug below.
    We are currently using MAB on our switches as a fallback to our 802.1X on our wired access. Order and Priority currently is 802.1X/MAB/Auth-Fail-VLAN. CWA is based on a failed MAC-Authentication which leads to an Authorization Profile to permit access with Webauth.
    If you configure Wired guest access on WLC there isn't a possibility to configure MAC-Authentication.
    CWA on our switches isn't possible because we are currently using failed MAC-Authentication to direct clients to our Auth-Fail-VLAN which has restricted access secured by SVI-ACL which allows us HTTP Access to printers (manual Cert Deployment) and automated Cert enrollment to our computers.
    Best Regards
    Benjamin

  • ISE 1.2 nac agent provision

    Hi,
    Is there any way to do a nac agent auto provision?
    I know it can be achieve by cwa portal(web redirect) and user have to install nac agent manually. But we would like to see nac agent be installed right afeter user successfully login using 802.1x.

    I dont follow your thought process but this is how i have most of my deployments are setup. 
    CWA < NSP < COA < 802.1x < Posture Status Unknown *In this state either client does or doesnt have nac agent in which ISE will proceed to install it or continue probing to for the NAC agent. 
    Remove CWA < NSP < COA from the picture and you have your exact scenario. What is your work flow look like that it is not "automatic" and define what you mean by "manually"?

  • ISE Guest portal web page customization

    Folks,
    Excuse me for being ignorant but I'm curious where I can get a "localization support example with sample HTML pages".
    This is what I found in the user guide:
    "You can customize the Guest portal by uploading HTML pages to Cisco ISE. When you upload customized pages, you are responsible for the appropriate localization support for your deployment. Cisco ISE provides a localization support example with sample HTML pages, which you can use as a guide. ISE provides the ability to upload, store, and render custom internationalized HTML pages"
    Let's say the web page that I want to show on the Guest portal has some style sheets (CSS). How am I going to upload it ?

    Please review the below link which might be  helpful:
    http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_41_guest_services.pdf
    http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html

  • ISE Posture for non-agent device problem

    I have a couple of questions:
    - They said it the documents: "these (non-agent) devices assume the Default Posture Status settings". I wonder how ISE determines that a device is a non-agent device, or to put it another way, when is the Default Posture Status settings applied to a device? Is it after some period of time not receiving anything from the agent? If yes, can and where do I change that time in ISE?
    - I tested this with my lab and saw that: after the user successfully login with his account, and the Authorization profile with Client provisioning is applied to that session, the user goes to a web page and gets redirect to the CPP page. Now if he just sits there and doesn't install the NAC agent, I noticed that after about 40s, the session is automatically restarted to a new one, with a different session ID, but the same username. The new session gets to the point where the same redirect Authorization profile is applied and the whole process cycles over and over. Things I observed each time the session restarts:
    + The user doesn't even have to enter the credentials again. The 802.1x login doesn't popup 
    + The Default Posture status (I set it to Noncompliant) is applied to the session right before it restarts. I can see an event on ISE indicating that. The event also shows the Acct-Terminate-Cause as "Admin Reset"
    + If at any point, the user installs a NAC agent then he can break the cycle (e.g becomes compliant) and carry on with other Authorization profiles
    So my question is: is that expected behavior of ISE? Although it seems no harm except new sessions are created continously
    Or have I configured something wrong?

    Anybody?

  • App-V 5 dynamically customize package

    I created an App-V 5 package which works fine.
    Now we need to dynamically change the AppV package before the users starts it. The changes required are e.g. register ocx, dll and or install a small exe program and then start the App-v package.
    First: is that easy possible by e..g modify the XML file to start e.g. VBS script which will perform the actions before the AppV package is started.
    Second: is it possible to make it related to an AD group. Like if member of AD group A then the file A.ocx will be registered and if member of the AD group B then the b.ocx file will be registered. Remark: the files A.ocx and B.ocx are placed outside the
    AppV package.
    I hope someone can help me with this.....

    Hello,
    See more information about the configuration files;
    http://technet.microsoft.com/en-us/library/jj713466.aspx
    See the Community editor;
    http://virtualengine.co.uk/vet/ace/
    See this limitation for what can be edited on the fly in App-V 5;
    http://www.virtualvibes.co.uk/cow-and-its-exclusions-in-app-v-5-0/
    I would just create different packages and apply those to different AD-Groups.
    Nicke Källén | The Knack| Twitter:
    @Znackattack

  • Error in customize package

    Dear All,
    I am facing below error , really will appreciate on your solid hep to sort out the issue
    Cause: FDPSTP failed due to ORA-06502: PL/SQL: numeric or value error: character string buffer too small
    ORA-06512: at "APPS.WSH_UTIL_CORE", line 2093
    ORA-06512: at "APPS.UML_POS_ORDER_IMPORT_PKG", line 923
    As I have called
    Thanks

    Hi,
    This api is creating issue and showing error message which I have send already.
    wsh_delivery_details_pub.autocreate_deliveries
    (p_api_version_number => 1.0,
    p_init_msg_list => apps.fnd_api.g_true,
    p_commit => l_commit,
    x_return_status => x_return_status,
    x_msg_count => x_msg_count,
    x_msg_data => x_msg_data,
    p_line_rows => p_line_rows,
    x_del_rows => x_del_rows
    yes definitely we apply some per-clone patches, but this errors appear one day before patches. I think this is not looking patch effected,
    but I remember at that day some our objects become invalid and after that we recompile objects.
    Thanks

  • SSIS package not able to connect to XLSX file under SQL Agent Job

    I have a very simply package using an Excel connection to an XLSX file.  It's a straight read of the file and import onto a table. 
    The package works fine in Visual Studio 2008 development and also runs fine when executing on the (server I copied it to) under Integration Services.    
    However, under a SQL Agent, the package (32-bit is checked) can not acquire the connection to an excel file.   I use UNC pathing to the file.  I've read other posts about similar problems and tried various scheduling options (including Owner of
    job).   
    I even tried a to trigger it with a command-line which did not work: 
    "C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\DTEXEC.exe" /sq "\our packages\My_XLSX_File_Import" /SERVER myserver /X86  /CHECKPOINTING OFF /REPORTING E
    All errors are:   "DTS_E_CANNOTACQUIRECONNECTIONFROMCONNECTIONMANAGER.  The AcquireConnection method call to the connection manager "Excel Connection Manager" failed with error code 0xC0209302." 
    I can certainly post more, if someone can help.   Sorry, but I am not getting the right help form those posts.   
    Please, are there any hints at how I can get the Agent job to work? 

    All errors are:   "DTS_E_CANNOTACQUIRECONNECTIONFROMCONNECTIONMANAGER.  The AcquireConnection method call to the connection manager "Excel Connection Manager" failed with error code 0xC0209302." 
    I can certainly post more, if someone can help.   Sorry, but I am not getting the right help form those posts.   
    Please, are there any hints at how I can get the Agent job to work? 
    Ensure that below correct drivers are installed on your target server because I see that file is
    .xlsx
    Microsoft Access Database Engine 2010 Redistributable
    Please refer:
    http://microsoft-ssis.blogspot.co.in/2014/02/connecting-to-excel-xlsx-in-ssis.html
    Cheers,
    Vaibhav Chaudhari
    MCP, MCTS, MCSA (SQL Server 2012)

  • MAC OS X unable to download Cisco ISE supplicant agent

    Hi,
    I have a problem with MAC OS X clients unable to download the Cisco ISE supplicant agent using Safari browser but able to login on the ISE guest portal. If the same client was to login to the ISE guest portal using Firefox; it has no issues downloading the ise supplicant and posture agent.
    I have tried to update the Java version on the client to the latest; however it does not resolve the issue. As I am new to MAC OS clients; I was wondering what may be the cause of the issue?
    I have summarized the issue as follows:
    1. MAC OS X 10.8 with safari 6 -- unable to download agent but can login successfully on the Cisco ISE guest portal
    2. MAC OS X 10.8 with Firefox -- able to login to Cisco ISE guest portal and download agents; no issues
    3. MAC OS X 10.7 with safari and firefox ---  unable to download agent but can login successfully on the Cisco ISE guest portal
    4. Windows XP & Windows 7 & Iphone/Ipad/Android -- able to login/download agent without any issues
    Any suggestions is appreciated.
    Thanks.

    For Agent Download Issues on Client Machine
    • Ensure that a client provisioning policy exists in Cisco ISE. If yes, verify the
    policy identity group, conditions, and type of agent(s) defined in the policy.
    (Also ensure whether or not there is any agent profile configured under Policy >
    Policy Elements > Results > Client Provisioning > Resources > Add > ISE
    Posture Agent Profile, even a profile with all default values.)
    • Try reauthenticating the client machine by bouncing the port on the access
    switch.
    Remember that the client provisioning agent installer download requires the following:
    • The user must allow the ActiveX installer in the browser session the first time an agent is installed
    on the client machine. (The client provisioning download page prompts for this.)
    • The client machine must have Internet access.
    Client Machine Operating Systems and Agent Support in Cisco ISE
    Check the following link
    http://www.cisco.com/en/US/docs/security/ise/1.1.1/compatibility/ise_sdt.html#wp95449

  • ISE - NAC agent profile

    Dears
    I want to deploy NAC agent via GPO and I need to create agent profile , I know how to create it on ISE but how i get the file in xml format to be distributed ?

    You can try installing only one PC (either by manual installation or by captive portal). If you have configured the posture rules in ISE then the NAC Agent automatically contacts the ISE server and downloads the last NACAgentcfg.xml available.
    Then you could browse the following directory and find the NACAgentcfg.xml file in your PC.
    C:\Program Files (x86)\Cisco\Cisco NAC Agent
    After that you can mass deploy the NAC agent along with the xml file. Although is not mandatory to deploy the xml file  because as a I said, every time there's a posture rule the NAC agent will download the last NACAgentcfg.xml available from ISE server.
    Please rate if it helps.

  • Client provisioning not working on ISE after 1.2 Migration

    Working on an initial piloted roleout of ISE with a customer. We initially had a single server setup as a pilot using 1.1.1.4 to pilot things like client supplicant provision, and then stood up a new VM as a secondary and upgraded that to 1.2. Today we tested client provisioning that work fine before, and it is failing for iOS (we haven't gotten to the other OS'es yet). What occurs is the user authenticates using PEAP and the client gets the request to install the root certificate. After this the client accepts the root certificate the connection drops. When you click the SSID to start the process again we see the redirect to the mydevices portal, but before you can click to register the client it redirected to accept the root certificate again, creating an endless loop. Has anyone else run into this bug?

    Please update the patch useing the below details and try it.
    To upload offline client provisioning resources, complete the following steps:
    Step 1 Go to the Download Software web page at http://www.cisco.com/cisco/software/navigator.html?a=a&i=rpm. You may need to provide login credentials.
    Step 2 Navigate to Products > Security > Access Control and Policy > Cisco Identity Services Engine > Cisco Identity Services Engine Software.
    Choose from the following Off-Line Installation Packages available for download:
    •win_spw--isebundle.zip— Off-Line SPW Installation Package for Windows
    •mac-spw-.zip — Off-Line SPW Installation Package for Mac OS X
    •compliancemodule--isebundle.zip — Off-Line Compliance Module Installation Package
    •macagent--isebundle.zip — Off-Line Mac Agent Installation Package
    •nacagent--isebundle.zip — Off-Line NAC Agent Installation Package
    •webagent--isebundle.zip — Off-Line Web Agent Installation Package
    Step 3 Click Download or Add to Cart.

  • NAC AGENT - DISCOVERY HOST IP ADDRESS with AD

    Hi,
    We have deployed a Cisco NAC Agent in our network with GPO update... The deployment model is L3 OOB / Real IP Gateway.
    The issue is that, we need to put the IP address in each host manually to start communicating with Cisco NAC Manager.
    Is there any way to make it automatic?
    Regards,
    Mubasher

    Hi Mubashir,
    I faced the same problem with cisco ISE and Tiago's response actually helped see below.
    " You can also distribute the NACAgentCFG.xml file with that value set.
    Please find here detailed info regarding this file:
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_agntd.html#wp1348376. "
    In that link, read the section: Agent Customization Settings
    From a NAC agent that has successfully been deployed with the IP configured , go to the NAC agent installation folder 
    C:\Program Files (x86)\Cisco\Cisco NAC Agent , and copy the NACAgentCFG.xml , open with wordpad and edit the line
    IP of PDP node or ISE standalone server
    Then place the edited NACAgent.xml file in the same folder as the one where your GPO will pick the agent from. When the Agent is installed , it automatically picks the configs from the .xml file.
    Regards,
    Henry

  • Cisco NAC Web Agent + Windows 8

    Hello,
    I´m implementing a Cisco ISE 1.2 and I am having troubles with NAC Web Agent and Windows 8 compatibility.
    All time that I try install NAC Web Agent in Windows 8, I get the message "Agent User Operating System is Not Supported".
    Follow are some informations about my Environment:
    ISE 1.2 Patch 3
    OS: Windows 8 Enterprise
    IE: 10 (In Desktop Mode w and w/o Compatibility View)
    NAC Web Agent: 4.9.0.1007
    Could you help me ?
    Best Regards,
    Daniel Stefani

    Hi Charles,
    I can download all this files, but I can’t import it in ISE Resourses.
    NAC Agent MST files
    nacagentsetup-mst-4.9.3.9.zip
    NAC Agent MSI Installation file
    nacagentsetup-win-4.9.3.9.msi
    NAC Agent Installation Package
    nacagentsetup-win-4.9.3.9.tar.gz
    Mac Agent Installation Package for MacOSX
    CCAAgentMacOSX-4.9.3.803.tar.gz
    NAC Agent MST files
    nacagentsetup-mst-4.9.3.5.zip
    NAC Agent MSI Installation file
    nacagentsetup-win-4.9.3.5.msi
    NAC Agent Installation Package
    nacagentsetup-win-4.9.3.5.tar.gz
    In this link that you sent me doesn’t have options to Cisco NAC Web Agent.
    But in the follow yes…
    http://software.cisco.com/download/release.html?mdfid=283801620&flowid=26081&softwareid=283802505&release=1.2&relind=AVAILABLE&rellifecycle=&reltype=latest
    Best Regards,
    Daniel Stefani

Maybe you are looking for