Network Access Control

Hi All,Can some one provide a solution for the below requirement?We do have ACS 4.2 appliance managing firewalls of different clients. The users are common i.e, helpdesk administrators. One of the client came up with setting different password policy...

HellowI'm using NAP's and want to use MAB as well. Right now i use the ACS Util to add MAC addresses to the right ACS Groups. But when using NAP's, I need to configure MAB under "Authentication" in the profile. Right there i also have to add all the ...

Hi,Is that possible to configure read-only access of ASA firewall in ACS 4.2; that too particularly for ASDM? Read-only is working fine for SSH protocol. But the customer requests for read-only access through ASDM.Plz suggest a solution with detailed...

Hi, we download a ACS v5.0 for evaluation proposes and we like to know if it possible install this eval on a VMWare Server 2.0, can some help us? Thanks

Hi NetProsMy objective is to assign static IP address for VPN clients. The tunnel group authentication is on a AAA LDAP server.AAA LDAP queries has been configured and tested to work.I followed the guide below, but could not get static IP assignment ...

Authentication failes with message:ACS MSCHAP password is invalid.Group auth works perfect.This problem only occurs when the local ACS User has an \ in the username Domain\user123The auth works perfect with the same password and the Username user123 ...

I see several posts on this subject have been added already, but I thought I would add my 2c.I've been trying to get a remote IPsec VPN(Cisco client) connecting from the inside of our office ASA to a remote ASA. The client would connect fine, but no...

Hi !I try to limit available command in user mode.... it does'nt work...Exemple I had permit show command for user DSC in my ACS shared profile.When user DSC telnet my router the authentication is validate by the same ACS. On the prompt > the DSC us...

Not having much luck getting this to work and searching the forums here everybody seems to say it is not possible unless TACACS+ is used. Is this still the case? I see the AAA/ACCT/CMD in the debug on the local switch but the RADIUS server never re...

Hi all!I have a problem, we are using freeradius server to authenticate the VPN users. It works fine.Now I want authenticate the ssh, asdm users with the same radius.The only problem is that the ASA doesn't send different attributes to the radius and...

How do i check to see user activity once its enabled on my ASA? I need help setting up the AAA on a radius server as well in regards to where i set up the server secret key?Help!

Hi,Not sure if this belongs in AAA or firewalling. I apologize for the mix-up.Does anyone know if there's a user-friendly (i.e. non-LUA) way of matching a single DAP entry to the following constraint:- match specific connection profile- match one of ...

Hi,I want to have my MS IAS RADIUS check on the connection profile that a SSL VPN user selected: Users can only authenticate for profiles that match their group membership. But a single user can be allowed to connect to more than one connection profi...