10-06-2011 09:36 AM - edited 03-10-2019 06:27 PM
Does anyone know if the following setting is a shipping default in the ACS 5.1? thanks
In the Access Policies ->Network Device Admin -> Identity -> Advanced Options, the If user not found was set to “Continue” .
Solved! Go to Solution.
10-06-2011 09:51 AM
It is not. By default upon installation the setting for this is Reject
When new rules are added to an identity policy the setting is similarly set to Reject. In order to change this need to expand the Advanced Options and choose your desired setting
10-06-2011 10:17 AM
The best you can do is the following
- Go to "Launch Monitoring & Report Viewer" and then select "Monitoring & Reports > Reports > Catalog > ACS Instance"
- Select radio button and then Run->Qery and Run
- In object type enter "Access Service" and in Object Name set to "Default Device Admin"
You will be able to see who made and changes and when. Note it does not give the details of the specific change since policy is a complex data object with multiple rules, ordering etc
10-06-2011 10:32 AM
Do the following:
- Go to "Launch Monitoring & Report Viewer"
- in navigation select "Monitoring & Reports > Reports > Catalog > ACS Instance"
- Select radio button next to "ACS_Configuration_Audit" and in bottom left select arrow on button called "Run" and then "Query and Run" option
- In object type enter "Access Service" and in Object Name set to "Default Device Admin" and then select "Run"
10-06-2011 09:51 AM
It is not. By default upon installation the setting for this is Reject
When new rules are added to an identity policy the setting is similarly set to Reject. In order to change this need to expand the Advanced Options and choose your desired setting
10-06-2011 09:59 AM
Thank you very much jrabinow.!!
Then I'm curious to know whether I can find when the setting was changed? and by whom?
10-06-2011 10:17 AM
The best you can do is the following
- Go to "Launch Monitoring & Report Viewer" and then select "Monitoring & Reports > Reports > Catalog > ACS Instance"
- Select radio button and then Run->Qery and Run
- In object type enter "Access Service" and in Object Name set to "Default Device Admin"
You will be able to see who made and changes and when. Note it does not give the details of the specific change since policy is a complex data object with multiple rules, ordering etc
10-06-2011 10:22 AM
- Select radio button and then Run->Qery and Run
Which radio button should I select? anyone? or the ACS_Configuration_Audit?
Thanks again.
BTW, I did run a report on the ACS_Configuration_Audit but couldn't see anything except my change which was made this morning. I'm assuming the default was set to "Continue"..
10-06-2011 10:32 AM
Do the following:
- Go to "Launch Monitoring & Report Viewer"
- in navigation select "Monitoring & Reports > Reports > Catalog > ACS Instance"
- Select radio button next to "ACS_Configuration_Audit" and in bottom left select arrow on button called "Run" and then "Query and Run" option
- In object type enter "Access Service" and in Object Name set to "Default Device Admin" and then select "Run"
10-06-2011 10:38 AM
Yes, that's what I need. Thanks a lot for your help.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide