Network Access Control

I'm migrating a ACS 4.2 to 5.5, in a previous version 4.2 we had the option to remove access to  shell, but without affecting the tacacs authentication for, eg a VPN. I can not find that option or something like that in version 5.5, any ideas?

Just a question surrounding EAP-FAST chaining (EAP-TLS inner)  and the ability to authorize the username in the CN field of the certificate against AD. As an example for standard EAP-TLS I am able to specifiy that the username should be in a specific...

ACS5.5 doesn't function  Remote Database with Microsoft   Database SQL2008R2error log as following:acs5a/admin# sho acs-logs filename MonitoringAndReportingScheduler.log Apr 15 2014 02:12:12 com.cisco.nm.acs.view.common.jobmgr.JobManager.start(JobMan...

Hello.I'm reading more posts about the "ip tacacs source-interface".I'm using a Catalyst 4503 with IOS version 12.2(44)SG1 configured to use vlan101's IP address as source address for the T+ request.However, the switch continues to use another IP and...

can we install anyconnect client on windows mobile os 6.5 or windows CE 6.0 / 6.5 ?

Hi Cisco People I'm using FreeRadius 2 and Cisco 2600 Terminal server to coordinate access to cisco routers based on time‏ ranges. Basically we are an education/training environment where we have some students accessing the routers and switches for p...

We use LDAP for auth and it has been working fine for years.  I moved our LDAP server to be across a tunnel between 2 cisco applicances (pix/asa), and everything can talk to the LDAP server *except* the device originating the tunnel.  I am trying to ...

with acs 4.2 installed in my network,   PEAP, EAP-TLS, md5... authentications work normally.  But Mac-Based-Authentication   doesnt work at all.  i tested every thing but no luck .This is what i have setup on Swith for MAB:aaa new-modelaaa authentica...

Hi, It has been suggested that our current configuration of ACS 5.3.40  could be prone to Clickjacking attacksRegarding the GUI the ACS needs to be configured to respond to X-Frame Options HTTP header to instruct the browser not to load the applicati...

 Hello there, We're going to be implementing 802.1x on our network of some reaallly old switches (6509 Cat OS with MSFC 2).  We use radius for AAA authentication and I've been reading that .1x uses radius.  How is that going to work?  Do I just add a...

Hi guysi'm configuring ACS 5.3 but i can't configure access policies.below some print captures.someone can explain me where is the problem?thank's in advance for your help