Network Access Control

hi,have a win2008 radius server with my ASA and its working fine. Know i want a RSA token solution for clientless SSL VPN. Which tokens the asa supports and is there anywhere a guide how to implement this?end scenario:Clientless SSL VPN, Anyconnect l...

HiI'm having a problem to set the netmask für SVC (anyconnect) clients when using a static IP assignment from MSAD via LDAP.The schemata within MS AD has no netmask attribute.We assign a 10.x.x.x address in the MS AD Dial-Up tab.This results in that ...

Good afternoon,For remote vpn users, I would like to configure a dynamic vpn split tunnel depending where are they connected.For example if a remote user is connected to ASA from italy, auth via acs radius server, a split tunnel list will be applied ...

Hi All,I am needing to find away to monitor if a monitor sessions is created/deleted or change.Is there anyway that you know of to see that detail

Hi !I would like to know where I can find documentation about the "Advanced Monitoring and Report" feature on ACS server version 5.1.0.44-3. I would like find information about the installation, benefit of this feature, and how to use advanced monito...

Hi!I'm trying to authenticate a WinXP client with PEAP.And since it is only possible to define only one Active Directory in ACS v5.1 ( why on earth is that???), I had to define my other AD domain through LDAP.But when I try to authenticate, this is w...

Hi,We are have two syslog servers defined, however we notice that the ACS only sends the syslogs to one server and will only send to the other in a failure scenario, which is a standard operation across all platforms. However we have a requirement fo...

I want to compare ACS 5.x versus ACS Express 5.x.I cannot find a SIMPLE 1 page feature MATRIX. Does anyone know if such a document is available ?     Apart for number of devices supported etc, are there any key features missing is Express ?          ...

Hi,If you have an ACS deployment consisting of 2 or more appliances is it possible to perform a hot upgrade from V5.0 to V5.1.  Following the upgrade guide at  http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.1/installati...

Hello,We're running ACS 4.1 on two appliances that access AD as the external user database.  I've found where to specify the domain to authenticate against; is it possible to specify in ACS which of our 5 DC's to communicate with?  If so, can I speci...

It doesn't work "Launch Monitoring & Report Viewer"If i click Launch Monitoring & Report Viewer" , that 's show up " The monitoring and reports database is currently unavailable. Attempting to reconnect in 5 seconds.  If problem persists, please cont...

I'm trying to control the access of my LAN by authenticate user with EAP / MSIAS + AD.The IAS denied the access with error 112: The remote RADIUS server did not process the authentication request.I setup the IAS policy to answer with vendor specific ...

Need a help1) We have implementing 802.1x authentication( MAC authentication) for central location,each user need to be authenticate through Laptop/desktop MAC address based on 802.1x. after authenticating user have received IP address from DHCP serv...

The following error message appeared when I join the ACS to domain x.y"dns.state DNS is downJun 24 19:00:00 aaa01 adjoin[11977]: INFO  cli.adjoin Join to domain 'x.y', zone 'null' failed."DNS server is up and able to ping.Please advise how to proceed

I have a very strange problem. I set up tacacs on two Nexus 5000 switches with exactly the same tacacs, aaa config (see below). N01 is working fine but N02 has problems in Authorization. I am able to authenticate into N02 but can use only a few comma...