Network Access Control

Is there a way of enforcing different auth behaviour dependant on the interface involved on the NAS?NAS in question ASA firewall pointing AAA to ACS 5.1The ASA has SSL VPN connections to Inside and Outside interfaces and config needs:-     - any SSL ...

Hi,I'm currently evaluating the NGS latest v2.01 image with a fresh new installation. After initial installation, I created sponsor and guest account.My plan is to use a Cisco ASA as the Radius client with Cut-through authentication - Radius to simul...

HiI was trying to upload about 250 devices to my ACS server using the file operations option.I downloaded the template added the devices but when I try the add the 250 devices only 15 wouldadd at any one time. Why? Does anyone know what the problem m...

Hello all- we're running ACS 4.x. currently we have "check dial-in permission" enabled. We have VPN users and wireless (.1x) authenticating against acs and then to AD. the problem is with the "dial-in permission check" we have to grant  this all vpn ...

Hi,We are migrating from ACS 3.3 to 5.1 - formerly we were able to configure ACS to use an external database for internal user passwords. Thus, in 3.3, we had AD users using a Windows database for their password and we were able to use our AD account...

Good day to you all, this is actually my first time configuring the acs device. I have gone through the documentations, userguide and some other stuff but cant still find my way around the box. I wan to integrate the box on our network but i'm still ...

hi,Im working on AAA authentication for an ASA (ASA 8.0(3) version) box thorough a TACACS+ server in ACS (4.2 version). The setup im working on includes several users in 3 classes: senior (privilege level 15), junior (privilege level 7) and monitorin...

Hi, I have a situation I am not sure how I should implement it, I need some help to better understand how certificate authentication for IPsec works.ASA has SSL certificate signed by well-known third party, trustpoint of this third party CA, certific...

hi,I test ACS 5.1 and have some questions to be answered  General concept suits me well (service policy, access policy and so on). Its very flexible but what Im looking for right now is the way to assign privilege-level attribute only to specific use...

Is there a 'create date' attribute for an ACS user? A typical question auditors will ask us for is a list of ACS/Remote access users created since 1st Jan 2010?Thanks,Brian