Network Access Control

I can get it to authenticate.  But I've read some posts on ACS 4.2 and authorization, but I don't find anything similar.I want to control down to what commands the authenticated user can run.  I want the defintion to come fromthe ACS server, or at le...

Hi!We have a setup with an ASA terminating SSL VPN users authentication with smart-cards. The authentication is done between the client and the ASA via its certificate and crl check. This works fine.But, we would like to make sure that the user that ...

Hello folks,Years ago I installed some patches on my ACS  4.1.x.x and recently I upgraded the system to 4.2.Now on the upgrade status page the old patches are still there, are they still used by the device? What is expected to happen if I remove them...

Hi.  Does ACS v4.2 support the addition of the Nexus switches?  We have a few new Nexus devices that have been added to ACS, but cannot be accessed successfully.  A msg re: role based authentication is received.  Do I have to do something special in ...

I have ACS 5.3. I am testing EAP-TLS Machine Authentication using Active Directory as an external Identity Store. II was testing and everything was going fine until I did some failure testing.My problem: I deleted my computer account out of Active Di...

Hello,We've an issue with authorization on NCS system. NCS successfully integrated witch ACS, but there is a problem with one user. All users have equivalent rights under root. There is shell profile with all possible tasks (exported from NCS server)...

                   I intend to create ACS local account from file. What is maximum of accounts can be in ACS 4.2?

   Hi,I am using ACS 5.3 What I am about is setting user authentication against existence of the user in specific AD group, not just being a member in any AD. What is happening now, users get authenticated as long as they exists in the AD, luckily th...

Hello All,I want to know is there anyway to tweek/limit internet bandwith of users through ACS ?

Hi all,I wanted to post an update to a potential bug in the apple ios code. If the name of the iphone doesnt contain a hyphen the device doesnt send the dhcp hostname in the dhcp request. If you enter the hyphen it is then sent and gets profiled corr...

I've configured LDAP authentication to allow access if  members are a member of the "VPN_Users" Group.  This configuration is  working, but only for some users.  For other users it isn't.  The output  of the 'debug ldap 255' shows an output of member...