Network Access Control

Hello,I'd like to enable both EAP-PEAP and EAP-TLS on the same network to support 802.1x authentication. The reasons are because of historical things i.e. 'older' devices use PEAP and newer devices  use TLS. Over time all will be using TLS, but for n...

I have installed ACS 5.1 and im having issues trying to patch the server. For some reason i cant even upload the new patch 5-1-0-44-3.tar.gpg into ACS 5.1. Its looks as though its loading in then disappears. I have tried installing patch 1, but the s...

I have a customer who is using a Pix firewall for his remote users and has setup a VPN Group and password and sent them all the .pcf file, they do not have to login locally or into a Radius server, just lanch the VPN client and there connected. On t...

We are moving from a Novell to a Microsoft AD environment.  The Domain controllers are running 2008.  Running ACS 4.2 on a ACS SE appliance.  So, we need to have a Windows remote agent.  We have the unknown user policy active and we have some group m...

Hi All,I have a group setup in Cisco ACS (V4.2) which holds dynamic users that have successfully authenticated through wireless. No problem. The users in this group have authenticated from a guest wireless setup. I want to prevent the same user from ...

If I cahnage my ACS Servers to support Network Devices GroupsWill I loss all the defined devices or are they moved to a default Group, which will then allow me to move them around ?ThanksIan

Hi All,  I would like some information on whether or not its possible to have the AnyConnect client check for Domain computer membership. As far as i can tell, the AnyConnect client needs to send some sort of attribute regarding what it views as its ...

Hi all,i'm trying to setup a tacacs server (the free version for linux). It is possible to use the linux /etc/passwd file to store the users/passwords.But i am trying to setup a dedicated passwd-style file to keep the tacacas users seperate from the ...

I have a need to authenticate and authorize users on a NAS via RADIUS against both SecurID and Active Directory using a Cisco ACS 5.1 appliance, but I need to ensure that the AD-authenticated users are in a particular AD group before authorizing.  Th...

Hello,I need some clarifications regarding how exactly the cut through poxy on ASA works in case we have a web enabled application that needs to be accessed from the outside and the listener command is not configured on the ASA.Will the ASA prompt fo...

HelloI need a UserAdmin,which can only create Accounts in special Group for example All Groups:Groupe1 an not in All Groups:Groupe2 .I can not change or add administrations roles. It is possible ?GreetingsDaniel Schmidt