topic ASA 5510 cannot connect to Microsoft IAS in Network Security https://community.cisco.com/t5/network-security/asa-5510-cannot-connect-to-microsoft-ias/m-p/1913098#M438023 <P>I'm at a total loss here. I am transitioning from a Microsoft ISA server to a Cisco ASA 5510. So far so good, until it comes to getting AAA functioning properly. I have a Microsoft IAS server that is functioning properly, however when I try to test it through the ASA's ASDM it errors out. When I run a packet trace it shows it's being blocked by the dreaded implicit ACL. The funny thing is that I can ping and traceroute to the IAS server from the ASA. I found numerous config examples for AAA using IAS, but still not working. </P><P></P><P>Could it possibly be behaving this way because my ASA and my IAS server are on two different internal netowrks? (172.31.1.x-ASA, 10.1.1.x-IAS)</P><P></P><P>Any help would be greatly appreciated!!</P> Mon, 11 Mar 2019 22:58:22 GMT akudrich1 2019-03-11T22:58:22Z ASA 5510 cannot connect to Microsoft IAS https://community.cisco.com/t5/network-security/asa-5510-cannot-connect-to-microsoft-ias/m-p/1913098#M438023 <P>I'm at a total loss here. I am transitioning from a Microsoft ISA server to a Cisco ASA 5510. So far so good, until it comes to getting AAA functioning properly. I have a Microsoft IAS server that is functioning properly, however when I try to test it through the ASA's ASDM it errors out. When I run a packet trace it shows it's being blocked by the dreaded implicit ACL. The funny thing is that I can ping and traceroute to the IAS server from the ASA. I found numerous config examples for AAA using IAS, but still not working. </P><P></P><P>Could it possibly be behaving this way because my ASA and my IAS server are on two different internal netowrks? (172.31.1.x-ASA, 10.1.1.x-IAS)</P><P></P><P>Any help would be greatly appreciated!!</P> Mon, 11 Mar 2019 22:58:22 GMT https://community.cisco.com/t5/network-security/asa-5510-cannot-connect-to-microsoft-ias/m-p/1913098#M438023 akudrich1 2019-03-11T22:58:22Z ASA 5510 cannot connect to Microsoft IAS https://community.cisco.com/t5/network-security/asa-5510-cannot-connect-to-microsoft-ias/m-p/1913099#M438024 <HTML><HEAD></HEAD><BODY><P>Ohh no no, That is going to work, anything placed from the ASA firewall itself will work cuz it does not have anything that would limit the Control plane. </P><P></P><P>Now, would you care to share the packet tracer (without the detail command please), remove the addresses and what no to see at which point does it fail? </P><P></P><P>The security level of the IAS, what is it? </P><P></P><P>Mike</P></BODY></HTML> Thu, 03 May 2012 04:11:55 GMT https://community.cisco.com/t5/network-security/asa-5510-cannot-connect-to-microsoft-ias/m-p/1913099#M438024 Maykol Rojas 2012-05-03T04:11:55Z