ACS, generate e-mail on any failed login attempt?

[wilson_1234_2]

I have ACS 3.3 and was trying to find a way to generate an e-mail whenever there is a failed login attmept.

I have only found how to generate an e-mail when a user tries to login to a disable account and this is working.

The report is populating on failed login attemps, but can the ACS server send an e-mail as well?

[ansalaza]

I don't think that you can email the failed attempts, these are the options for SMTP:

"Email notification of event - Specifies whether Cisco Secure ACS sends an e-mail notification for each event."

"Cisco Secure ACS uses the System Monitoring feature to detect the events to be logged."

It looks like the Failed attempts are not consider part of the events that "System Monitoring" checks.

It could as you mentioned "Generate event when an attempt is made to log in to a disabled account".