topic Cisco Secure ACS 1113 Appliance V4.0 - Machine Authentication in Network Access Control https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619865#M421823 <P>I am testing a Cisco ACS 1113 Appliance V4.0 for Wireless LAN Authentication. I have installed the Windows Agent on a Windows 2003 Active directory Server and I have installed a Certificate on the ACS and intend to use PEAP.</P><P></P><P>Has anybody been able to get Machine Authentication to work using the 1113 ACS Appliance?</P><P></P><P>Looking at the Windows security logs it looks like the server is seeing a machine called "CISCO" trying to authenticate. I believe this is the ACS.</P> Sun, 10 Mar 2019 21:57:39 GMT mark.cronin 2019-03-10T21:57:39Z Cisco Secure ACS 1113 Appliance V4.0 - Machine Authentication https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619865#M421823 <P>I am testing a Cisco ACS 1113 Appliance V4.0 for Wireless LAN Authentication. I have installed the Windows Agent on a Windows 2003 Active directory Server and I have installed a Certificate on the ACS and intend to use PEAP.</P><P></P><P>Has anybody been able to get Machine Authentication to work using the 1113 ACS Appliance?</P><P></P><P>Looking at the Windows security logs it looks like the server is seeing a machine called "CISCO" trying to authenticate. I believe this is the ACS.</P> Sun, 10 Mar 2019 21:57:39 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619865#M421823 mark.cronin 2019-03-10T21:57:39Z Re: Cisco Secure ACS 1113 Appliance V4.0 - Machine Authenticatio https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619866#M421824 <HTML><HEAD></HEAD><BODY><P>Can anyone help with this???</P></BODY></HTML> Mon, 05 Feb 2007 10:06:39 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619866#M421824 mark.cronin 2007-02-05T10:06:39Z Re: Cisco Secure ACS 1113 Appliance V4.0 - Machine Authenticatio https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619867#M421825 <HTML><HEAD></HEAD><BODY><P>For ACS to perform Windows authentications we need to specifiy a workstation name. </P><P></P><P>In AD , the user should have access to all computers. </P><P></P><P>OR </P><P></P><P>A computer account named CISCO should exist. </P><P></P><P>All users that Windows will authenticate have permission to log in to the computer named CISCO. </P><P></P><P>ACS shows error message only when the user tries to login from a work station he has no permission to log on. </P><P></P><P>If you are using ACS 4.1 this link will be useul. </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_installation_guide_chapter09186a008070a63c.html#wp1041202" target="_blank">http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_installation_guide_chapter09186a008070a63c.html#wp1041202</A> </P><P></P><P></P><P></P><P>We need to enable PEAP machine authentication inside ACS Windows Authentication Configuration.</P><P></P></BODY></HTML> Sat, 10 Feb 2007 06:50:55 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619867#M421825 amrkrish 2007-02-10T06:50:55Z Re: Cisco Secure ACS 1113 Appliance V4.0 - Machine Authenticatio https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619868#M421826 <HTML><HEAD></HEAD><BODY><P>Just to clarify </P><P></P><P>When a Windows Administrator looks in his/hers security logs it will appear that multiple wireless users are logging in to the same Machine "CISCO".</P><P></P><P>Is this correct?</P><P></P><P>When machine authentication is configured the</P><P>Windows Administrator will see the Machine account authenticate against AD. The password for the machine account is created</P><P>when the Machine joined the Windows domain.</P><P></P><P>is this correct?</P><P></P><P>Does creating the machine account CISCO represent a security risk?</P></BODY></HTML> Mon, 12 Feb 2007 16:14:02 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619868#M421826 mark.cronin 2007-02-12T16:14:02Z Re: Cisco Secure ACS 1113 Appliance V4.0 - Machine Authenticatio https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619869#M421827 <HTML><HEAD></HEAD><BODY><P>The Windows Administrator see multiple wireless users are logging in to the same Machine "CISCO" .</P><P></P><P>As far as i know there has been no security incidents related to this.</P></BODY></HTML> Wed, 14 Feb 2007 11:50:30 GMT https://community.cisco.com/t5/network-access-control/cisco-secure-acs-1113-appliance-v4-0-machine-authentication/m-p/619869#M421827 amrkrish 2007-02-14T11:50:30Z