[NAC without authentication]

Dear All:
Quick question.
Can you implement OOB NAC but avoid using authentication. That is:
That is when a user tries to login through a specific port, that user (whoever it may be) is checked against a static port-assigned policy and IF the user (whoever it may be) is validated as being OK, that port will always be assigned to the same VLAN. I'm just trying to see if I can do posture validation without having user credentials on an LDAP server.
Thanks in advance.
c.

Carlos there is a simple way to bypass authentication and just enforce posturing.
However this will not work if your entire deployment requires user authentication. If not, then this is how you would accomplish this.
You will create device filter for all mac address and select the role type as check, reference material is found here:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_addSrv.html#wp1052361
Then you will create a port profile and follow step 9 here:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_oob.html#wp1083087
I wanted to know more about your deployment, please keep in mind that the filter behavior does change depending on the deployment:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_addSrv.html#wp1142120
Thanks,
Tarik

Similar Messages

  • Macbook Pro won't let me move files to HD without authentication. Also when I try to move files from the HD to the desk it just copies them.

    My 2013 Macbook Pro running Mavericks 10.9.5 won't let me move files to the HD without authentication. So I have to keep putting my password in. Also when I try to move files from the HD to the desk it just copies them. This just suddenly happened last night. Anyone have any ideas what it could be? Thanks

    See http://support.apple.com/kb/HT1229?viewlocale=en_US - I doubt that it will solve your problem, though. You may want to post on the iPhoto forum - that's where all of the iPhoto experts hang out.
    Good luck,
    Clinton

  • How to send an email without authentication

    when I use javamail to send an email ,give authentication information seems
    a must ,but I need to send it without authentication.Any method that can
    implement it?

    you can set null for authenticator object.......
    look code below, it works......
    Properties prop = new Properties()
    Session ses = Session.getDefaultInstance(prop,null);

  • Accessing PI WSDL without authentication

    Hi,
    Is there a setting  / configuration that would allow access to a WSDL URL(obtained from Sender Agreement -> Display WSDL) and pull down the WSDL file without authentication?
    Thanks & Regards,
    Renjith John Andrews

    Hello Renjith,
    Did you find any way to get SOAP wsdls without authenticaion? Now, I'm looking for the way how to get wsdl without authentication.
    Thanks&Regards
    Volkan

  • Send a mail via smtp without authentication

    Hello,
    I'm developping a web application that reports errors or 'strange situations' to the application'a admin with an e-mail message to the address entered in a sort of wizard. I've read some tutorials and actually I'm able to send mail via smtp only with authentication, withouth i get this error: "530, Address requires authentication". How can i send mails without authentication?

    Normally the administrator of those forums is also the administrator of the SMTP server they use, so they configure the server to accept requests from the forum software without authentication.
    If you are running your own SMTP server you can do that too. If you are using somebody else's server you will have to follow their rules. You could always contact the administrator and ask whether you could be made exempt from authentication...

  • Configure SMTP without authentication to share photo by email

    I'm not able to share photo by email using a SMTP server without authentication.
    Can anyone tell me how to configure an account without authentification?
    Regards,
    Frederic

    Is your Outlook version compatible with Mountain Lion? To be used from other Applications as Mailer it nneds to sandboxed, see this thread.
    Re: since update I can not send pitures via outlook or apple mail please help
    I do not think, there is a version of Outlook right now, that can be used to mail from Aperture. Use "Mail.app" instead.
    I do not know, what may be wrong with Facebook upload. The update to 3.4.1 should have fixed the Facebook access problems.
    Regards
    Léonie

  • Security Athorization without authentication - wiill this work? Attn Frank

    Hi Frank:
    Fun never stops and never know what is coming.
    Just when I have my nice tables set up for authentication and authorization,
    now I hear that I have to test a scenario where authentication is going to be provided by an external utilty (An LDAP Server behind which PeopleSoft tables have username/pw) info. My questions are:
    (1) Is it possible to turn off authentication via J2EE Container but keep Authorization on? I want the ability to use page related security roles! And, yes, there will be a table with usernames and roles as well (which is working).
    Change: However, the table with usernames and passwords will be in a PeopleSoft table behind LDAP. (The authentication does work with a few tweaks in web.xml. So, can't complaint there)
    (2) Is there a better solution (given the external authentication utility is a given)?
    (3) Is there a way to fool JAAS to say, ok don't show the login screen but you are authorized? I now wonder what the DBTableLoginModule do? Can we tell it, "forget authentication, just get the roles?"
    I really don't want to lose the authorization provided by JAAS and, not to mention, permissions (which I have not gotten to work but more about that on another post).
    Thanks

    Hi,
    1) as said, nothing prevents you from building a JAAS LoginModule that does what you need - e.g. authenticate a user against LDAP, then connect to the database and query for his/her user roles. You can't have container managed authorization without authentication though.
    There will be a change in API in JDeveloper 11 (and most likely in JDeveloper 10.1.3.4 - upcoming) that allows you to set a Subject into the OC4J context, in which case you don't need container managed autehntication. However, I don't have it tested yet and can't tell to what extend this would be useful
    3) Sure, you can build a JAAS LoginModule that doesn't care for authentication. However, this doesn't work with container managed security. As far as I am aware, the only option to not show a login dialog is to use certificates. And certificates are not yet to use with custom LoginModules. So the above mentioned API - that is available as a backported patch for 10.1.3.1 - might do the trick
    Frank

  • Can't modify folders without authenticating myself. I am admin. Any ideas?

    I can't create a new folder, save a file or move anything to a folder I have in my documents without authenticating it.
    I am the only user and am logged in as admin.
    Any ideas?
    I feel like I am using Windows.

    Hi G, and welcome to Apple Discussions.
    Run Repair Permissions: Applications>Utilities>Disk Utility>select HD in panel at left>click on Repair Permissions at bottom of main window and allow process to finish before quitting DU.

  • Authorization without authentication

    Hello,
    From Java code, is there a way to query the users/groups in Weblogic LDAP without requiring a password?  I'm using a Java application with Weblogic 12.1.2 configured to point to an external LDAP server.  From a java client, I would like to use the Windows username and query against LDAP to see which groups the user is in.  It seems like this is possible using SessionContext.getCallerPrincipal() but I always get 'Anonymous', I believe because the user has not been authenticated.  Is there a way to get LDAP user/group information using Java from the Weblogic server without having an authenticated user?
    Thanks for any information!

    Hi,
    Thanks for confirming.
    Sounds like you would need to speak to your LDAP / AD admin to set up an user with no authentication ( no credentials ) required .   If the're happy to set up that up . problem solved.
    Makes me wonder , what is it you are trying to do ?  i,e why would you need to query AD without authentication and check / pull details of users. ?   Even if the AD admin agrees to set one up. that's a security risk.
    In additon you are intending to use that user from within the Java application. Boy ! I'm sure it'll raise quite a lot of heads if thats for an commerical project work .
    Sri

  • Creating/Mapping security roles without authentication

    Hello all, I am new to WebLogic 9.1, and I appreciate your help in advance.
    I have an HTTP header pre-populated with the roles a logged-in user has (these roles are defined outside websphere), and the user has already been authenticated.
    I want to map each role from my header to a URI configured in weblogic, so it can authorize/deny access to that page within the container, based on the role in the header.
    What would be a good approach to doing this? I have been looking through the security documentation, and I am a bit overwhelmed, I'm not sure where to begin.
    Thanks

    Hi,
    1) as said, nothing prevents you from building a JAAS LoginModule that does what you need - e.g. authenticate a user against LDAP, then connect to the database and query for his/her user roles. You can't have container managed authorization without authentication though.
    There will be a change in API in JDeveloper 11 (and most likely in JDeveloper 10.1.3.4 - upcoming) that allows you to set a Subject into the OC4J context, in which case you don't need container managed autehntication. However, I don't have it tested yet and can't tell to what extend this would be useful
    3) Sure, you can build a JAAS LoginModule that doesn't care for authentication. However, this doesn't work with container managed security. As far as I am aware, the only option to not show a login dialog is to use certificates. And certificates are not yet to use with custom LoginModules. So the above mentioned API - that is available as a backported patch for 10.1.3.1 - might do the trick
    Frank

  • Nac without gui?

    Hello, I am trying to connect to my college's network through arch. The issue is that the school uses the Cisco Any Connect vpn client and Nac agent client to connect to the network. Since I just installed arch onto my laptop, I do not yet have X11 installed. While I have correctly setup online and offline netcfg profiles I have to launch the Cisco java applet in order to have access to the web.
    Links obviously does not have a java plugin, and even if it did I would not be able to connect to the network because the Cisco java applet launches a gui window. I tried downloading the necessary X packages through my windows partition and installing them using pacman -U, but then I discovered dozens of extra dependencies that I would need to install for that to work. Since I do not have internet access installing every single one of those dependencies would be tedious.
    I have tried to find somebody in the IT department or the Computer Society to give me assistance but I have had no luck. Despite the existence of a Linux research lab, I appear to be the only person on campus who actually uses Linux (proprietary systems are yucky).  I want to know if there is a workaround for my issue--is there a guiless NAC and vpn client that is compatible with Cisco? Are there any other possible solutions?
    Thank you for your assistance .
    EDIT: As An alternative is there any way I can download all of the required xorg files off the archlinux website without having to go out of the way to download every individual dependency for every package? Again, the issue is that I can not access the network through my linux partition. I can connect to it, but I can not download off of the package repository or browse the internet without a java and javascript enabled browser. The network authenticates me by prompting me with a cisco nac gui window and asks for my username and password. Is it possible to do this without a gui browser?
    EDIT AGAIN: Can openvpn achieve what I want it to? I want to connect to the network vpn with my username and password.
    Last edited by werdna94 (2012-09-16 21:02:48)

    Carlos there is a simple way to bypass authentication and just enforce posturing.
    However this will not work if your entire deployment requires user authentication. If not, then this is how you would accomplish this.
    You will create device filter for all mac address and select the role type as check, reference material is found here:
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_addSrv.html#wp1052361
    Then you will create a port profile and follow step 9 here:
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_oob.html#wp1083087
    I wanted to know more about your deployment, please keep in mind that the filter behavior does change depending on the deployment:
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_addSrv.html#wp1142120
    Thanks,
    Tarik

  • Creating a service without Authentication

    Dear,
    We created the following scenario for use with our Adobe Interactive Forms.
    The flow is synchronous, starts with a service, goes over PI for logging and minor mapping, call a Proxy on an ERP system, fills in the data, and sends it back with several rows of data. In the configuration with Communication Channels :
    SOAP Sender CC -> PI -> Proxy Receiver CC
    Up until recently we always used the normal authentication for our services, now however, we need to create a service that has no authentication. Is this possible? It can't be HTTPS either. The reason is that Adobe Interactive Forms (in SAP) supports neither of these (logon & https) yet.
    I'm open to any/all suggestions. Another option would be to create the service directly on the ERP system, and expose it as an Enterprise Service, using the ESR. Can I do this without using a logon/https?
    Thanks in advance,
    Frederik-Jan

    Frederik-Jan,
    I am sitting with the same issue. Did you find a solution to this problem? Please can you be of assistance the resolution or point me in the write direction.
    Much appreciated.
    Regards
    Willie Hugo

  • Document in KM not opened without authentication when SSO is enabled.

    Hi,
    I am trying to open the document (with full url of the document in new window) in new window but the popup is displaying for authentication.
    SSO is enabled and I am able to access the portal without giving credentials. But in new window if I try to open the document with full url then it is asking for authentication.
    Please let me know what cofigurations should I do to achieve this.
    Thanks

    Hi,
    Post the URL with which you are opening the document in new window.
    The key here is to set proper AuthScheme for the Iview.
    http://help.sap.com/saphelp_nw70/helpdata/EN/44/42c2ed81ce2152e10000000a114a6b/frameset.htm
    So if you are calling IView using path: http://<server>:<port>/irj/servlet/prt/portal/prtroot/<pcd address>
    Then check the IView's AuthScheme property and choose appropriate one:
    http://help.sap.com/saphelp_nw70/helpdata/EN/66/1700fd44385c44afc0f781b6f90e0f/frameset.htm
    http://help.sap.com/saphelp_nw70/helpdata/EN/54/a334ed5bbfd5488b8cdd67b2c594a9/frameset.htm
    https://forums.sdn.sap.com/thread.jspa?threadID=338537
    Regards,
    Praveen Gudapati

  • Show report without authentication

    hi,
    i have a requirement that i want to show a report every month to anybody who have the link(ie URL) without any authentication.
    could we implement this ???
    if yes please provide the detailed steps...
    Cheers...

    in the above link if the user goes to the link
    http://localhost:9704/analytics/saw.dll?Dashboard&_scid=zoOm3GZQusI&PortalPath=Sharedpath&Page=Pagenamel&PageIdentifier=name&BookmarkState=bookname&NQuser=Administrator&NQPassword=Administrator
    then he can see the particular report
    but if he goes to this URL after the aboe
    http://localhost:9704/analytics then he can see other reports also..
    my requirement is that if he try to access
    http://localhost:9704/analytics
    link then he should be asked for username and password....
    regards
    Ankit

  • Execution of query without authentication

    Hello everyone,
    I need to know how to provide to my client the following scenario.
    They want to enter the web, execute a query but without the authentication, and then make filters over it.
    The obvious answer is to use Broadcast but they donu2019t want to use this tool.
    Can anyone help me?
    Thank you,
    Joana

    Hi everyone,
    Mohan,
    The Portal is not installed and the client doesn´t want to use SAP.
    The client as a lot of companies that donu2019t have SAP installed and he would like to make available, for the employees, a few BW queries. But he doesnu2019t want to install Broadcast and don't want to have the trouble of executing the queries, and send them by e-mail, either.
    Joerg,
    What do you mean by u201Csimulate the Broadcaster and install the Broadcaster Programsu201D?
    Do you have any documentation that my help me?
    All help would be much appreciated.
    Thank you,
    Joana

Maybe you are looking for

  • Cannot add files to iTunes - iTunes won't add files

    I have just purchased a new Macbook Pro. I then used an external hard drive to transfer music files from my desktop PC to the Macbook Pro. I copied the files directly to the iTunes Music folder on the Macbook, and then through the "Add to Library" op

  • Sharepoint 2013 designer workflow mail not sending

    Hi I am doing sharepoint 2013 workflow for mail sending  using designer. I am sending mail when new item created in List. Here status is completed, but mail not sending the following error comes "The e-mail message cannot be sent. Make sure the e-mai

  • Data and Index lookup Cache

    Hi All, We are facing performance issue on executing a task WC_SIL_APInvoiceDistributionFact, this takes 1:20:13mins to complete the load. Issue is with the Lookup table W_EMPLOYEE_D that takes around 35mins, so we have increased the data and index c

  • Scanner set up for HP Officejet J4680 All-In-One

    I'm trying to set up to scan from the HP OfficejetJ4680  All-In-one. I do not know what software I need to download to my Acer laptop to get the scan function to work on the HP Officejet

  • HELP!! I cant put any photos in imovie6

    I am a new user of imovie. I am trying to make a slide show for iweb. cant seem to put any pictures on imovie. i add picture then there is a red bar on the bottom of the picture in the timeline once the red bar continue all thay way through the pictu