ACS - Change Windows Remote Agent Selection

Remo Vicars — Mon, 11 Mar 2019 02:34:30 GMT

Hello,

I've recently tried to change my Primary Remote Agent from ACS to another configure Remote Agent. it's available and in the same domain.

This works well but I lose All my Database group Mappings when doing so..

The Domain disappears from the list and \DEFAULT is left alone.

How can I change my Primary Remote agent without losing my Domain mappings. I have over 300 mappings defined.

Thanks,

Remo

ACS - Change Windows Remote Agent Selection

Tarik Admani — Fri, 21 Sep 2012 21:29:53 GMT

Remo,

Based on the user guide for the remote agent, the database group mapping is anchored by the messaging received from the CSWinAgent. It seems as if you do not setup a cluster (primary and secondary) that this mapping will be lost when you add another RA.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/3.3/installation/guide/remote_agent/rawo.html#wp220187

CSWinAgent

The CSWinAgent service is included only in the Windows remote agent. It is the service that supports Microsoft Windows authentication. It is controlled by CSAgent but it receives authentication requests from appliances directly on the ports it is configured to listen to. It supports authentication of users and machines, user password changes, and retrieval of group memberships. CSWinAgent makes no decisions about user access. Instead, it passes the results of its Microsoft Windows queries on to the appliance initiating the query.

I dont mean to "kick you" while you are down but this what makes ACS 5.x more favorable you it is policy based so you dont have to map groups anymore.

Thanks,

Tarik Admani
*Please rate helpful posts*

topic ACS - Change Windows Remote Agent Selection in Network Access Control

ACS - Change Windows Remote Agent Selection

ACS - Change Windows Remote Agent Selection

CSWinAgent