Network Access Control

We are moving from a Novell to a Microsoft AD environment.  The Domain controllers are running 2008.  Running ACS 4.2 on a ACS SE appliance.  So, we need to have a Windows remote agent.  We have the unknown user policy active and we have some group m...

Hi All,I have a group setup in Cisco ACS (V4.2) which holds dynamic users that have successfully authenticated through wireless. No problem. The users in this group have authenticated from a guest wireless setup. I want to prevent the same user from ...

If I cahnage my ACS Servers to support Network Devices GroupsWill I loss all the defined devices or are they moved to a default Group, which will then allow me to move them around ?ThanksIan

Hi All,  I would like some information on whether or not its possible to have the AnyConnect client check for Domain computer membership. As far as i can tell, the AnyConnect client needs to send some sort of attribute regarding what it views as its ...

Hi all,i'm trying to setup a tacacs server (the free version for linux). It is possible to use the linux /etc/passwd file to store the users/passwords.But i am trying to setup a dedicated passwd-style file to keep the tacacas users seperate from the ...

I have a need to authenticate and authorize users on a NAS via RADIUS against both SecurID and Active Directory using a Cisco ACS 5.1 appliance, but I need to ensure that the AD-authenticated users are in a particular AD group before authorizing.  Th...

Hello,I need some clarifications regarding how exactly the cut through poxy on ASA works in case we have a web enabled application that needs to be accessed from the outside and the listener command is not configured on the ASA.Will the ASA prompt fo...

HelloI need a UserAdmin,which can only create Accounts in special Group for example All Groups:Groupe1 an not in All Groups:Groupe2 .I can not change or add administrations roles. It is possible ?GreetingsDaniel Schmidt

Hi,I set-up an ACS server to authenticate users using AD.It works fine for authenticating the users login attemptsbut when I go to check the logs for failed and successful loginsthe logs do not appear.Any idea what could be causing this?Is there some...

1.48 port Cisco 3550 Series 12.2 with enchanced feature set has to make dot1.x for the clients with windows 7 Pro OS. The radius must be W2008 Standart.2.WInd2008 NPS is configured with Network policy and appropriate NPS client settings. It works whe...

I am trying to setup group mapping on ACS 4.2/Windows for group mapping as shown below.ACS--->Ext db--->Group mapping--->windows--->choose domain---> add mapping----> choose NT group and pick one acs group-->submit.Wireless LAN users --> members of "...