Network Access Control

I'm currently working on a proof-of-concept for 802.1x wired authentication using ACS 5.2, with Windows 2008 active directory as the identity store.  I know how to do dynamic VLANs based on AD group membership, but is it possible to dynamically assig...

Hi,I wonder if I need to go through "Lookup Server" and Mapping Rules" under "User Management  - Auth Servers", if am using AD for user authentication only. Once user got authenticated and postured assessed, then he will be placed on Access Vlan pre-...

I have an C4506 with a  WS-X4548-GB-RJ45V module. I am running version  Version 12.2(54)SG, I have implementet 802.1X on the access-ports but I can´t get multi-domain configuration to work.Mostly the PC-client is connected to the phone and the phone ...

I have tacacs+ configuration working for authenication against CLI and web GUI. Everything is working as one would expect with one exception, from the GUI if I click on the any of the links that takes you to the security pages I get prompted for auth...

We have ACS 5.1 up and running. Our company has a SuperCert purchsed with Thwarte so we requested a Certificate. Once we figured out the formatting we were able to successuflly get the certificate to bind to the CSR. For some reason our windows 7 use...

Hi, I am trying to configure my ASA to require authentication for all outbound traffics except to some selected networks.  I have come up with a configuration (below) and for some reason everytime I apply it, everybody is requiring to authenticate ev...

I'm facing issue about my ACS software. All services are down and cannot start, especially CSAuth.Windows log reported:The data buffer created for the "CSRadius" service in the "C:\Program Files\CiscoSecure ACS v4.0\bin\rad_mon.dll" library is not al...

  Let me preface this with  the fact I am a VMsysadmin (I know boo, hiss) versus a network manager.  Recently one of our network managers requested we provision an Vmware 4.1 vm for his use to load ACS 5.1. Everything is good except that I have no c...

I have a primary and secondary ACS server.  The primary server is also the log collector (not sure if it's relevant).  The problem I'm having is when my ASA is using the secondary ACS as it's RADIUS authenticator, the RADIUS accounting log reports do...