Some statement log are missing in my ACS log

xine xine — Fri, 21 Feb 2020 13:41:37 GMT

Hi !

We are using our ACS server 5.6 running patch Level 4 to authenticate users on different telecom equipment with in the Compagny.

I'm actually trying to configure "read only access" for some users to our BlueCoat Packet Shapper device. The full access works properly actually.

I had add a new statement in the Policy before the Full access statement.

Statements are pretty simple the restricted statement said :

if Identity group is "limited" and "Device Type" is "BlueCoat" Shell Profile is "Permit access" Rule number 8

the next statement do not take care of user member group membership but "Device Type" is "BlueCoat" Shell Profile is "Permit Touch" Rule number 9

When I look at the AAA report I know some of my attemp aren't log (and I'd liked to know why...)

I don't know what I can do more to make my first statement match instead of the second

Anyone may help ?

Is the read only access

Jatin Katyal — Sat, 16 Jan 2016 20:47:50 GMT

Is the read only access working for you and you just don't see the attempts in ACS logging?

Here is an example of setting Read Only access with Radius

https://supportforums.cisco.com/document/114076/bluecoat-packetshaper-and-cisco-acs-v5-x-configurationpdf

Also, check under Monitoring & reports > Dashboard > reports > AAA protocol > Radius authentication.

let me know if you've any doubts.

- Jatin