topic Re: Win 2003 + ASA 8.x authentication in Network Access Control https://community.cisco.com/t5/network-access-control/win-2003-asa-8-x-authentication/m-p/1099568#M380650 <HTML><HEAD></HEAD><BODY><P>I've already read this. Do you notice the little "against Active Directory" thing in the title? My problem is that I have to do this against the local SAM database:)</P></BODY></HTML> Fri, 01 Aug 2008 18:30:57 GMT thegrave2000 2008-08-01T18:30:57Z Win 2003 + ASA 8.x authentication https://community.cisco.com/t5/network-access-control/win-2003-asa-8-x-authentication/m-p/1099566#M380588 <P>Hello guys,</P><P></P><P>I have a client that has a Win 2003 R2 server without AD installed. I have an ASA 5505 which is going to terminate the L2TP over IPSec tunnels (Win XP SP2 or later clients...hopefully). My question is what options do I have for authentication against the local SAM database? I read tons of documents and it seems that LDAP and Kerberos authentication require AD, NTLM can be used only with Web VPN for SSO (besides that it's deprecated in Win 2003 as far as I know) so the only option I've got is running IAS (part of the default packages coming with Win 2003 R2, not an additional soft, right?) and utilizing the local SAM, is that right?</P><P></P><P>There's a pretty nice article right here:</P><P></P><P><A class="jive-link-custom" href="http://articles.techrepublic.com.com/5100-10878_11-6180954.html" target="_blank">http://articles.techrepublic.com.com/5100-10878_11-6180954.html</A></P><P></P><P>The only thing that bothers me is "The following groups are in this condition" window. What properties should a Win 2003 user group have so that it's eligible for use by the IAS service for authentication purposes? Also - has anyone deployed this setup, are there any non-obvious obstacles/problems that occur? I'm a little bit scared as my Win 2003 administration skills are not pretty good and don't wanna mess up something I cannot fix later.</P> Sun, 10 Mar 2019 23:00:34 GMT https://community.cisco.com/t5/network-access-control/win-2003-asa-8-x-authentication/m-p/1099566#M380588 thegrave2000 2019-03-10T23:00:34Z Re: Win 2003 + ASA 8.x authentication https://community.cisco.com/t5/network-access-control/win-2003-asa-8-x-authentication/m-p/1099567#M380623 <HTML><HEAD></HEAD><BODY><P>check the following link will be useful</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806de37e.shtml" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806de37e.shtml</A></P><P></P><P></P><P>please rate if helpful</P><P></P></BODY></HTML> Fri, 01 Aug 2008 14:24:01 GMT https://community.cisco.com/t5/network-access-control/win-2003-asa-8-x-authentication/m-p/1099567#M380623 Marwan ALshawi 2008-08-01T14:24:01Z Re: Win 2003 + ASA 8.x authentication https://community.cisco.com/t5/network-access-control/win-2003-asa-8-x-authentication/m-p/1099568#M380650 <HTML><HEAD></HEAD><BODY><P>I've already read this. Do you notice the little "against Active Directory" thing in the title? My problem is that I have to do this against the local SAM database:)</P></BODY></HTML> Fri, 01 Aug 2008 18:30:57 GMT https://community.cisco.com/t5/network-access-control/win-2003-asa-8-x-authentication/m-p/1099568#M380650 thegrave2000 2008-08-01T18:30:57Z