Network Access Control

Hello again.I'm now trying to match on Directory Attributes returned by one of my Radius Identity Servers in my 'Authorization Policy'.The log comes back with this:Evaluating Service Selection Policy15004  Matched rule15012  Selected Access Service -...

New deployment of ACS 5-1-0-44-3, first time I launch the Monitoring and Reporting Viewer per session, it logs me out of ACS completely. Is this a known bug.

Hello,I have an ASA 5520 with 4 interfaces. At the moment is connected to an ISP-A via its outside interface; and to an inside private network A via inside interface.I would like to connect another ISP-B and create a DMZ. I want to route to the new I...

Hi all,I configured LDAP on acs 1120 appliance,but i don't know how to fill parameter on ldap configuration:Subject ObjectClassSubject Name AttributeCertificate AttributeGroup ObjectClassGroup map attributeSubject search baseGroup search baseMy domai...

For many organisations the Cisco Secure ACS server is the guardian of the network - controlling administrative access to routers and switches plus overseeing end network users over VPN, wireless and firewall.Its no surprise therefore that it should c...

Hi Pros,              I run into some when trying to use guess vlan in dot1x authentication. The client is able to grab an IP in the guess vlan;however, it can't go to the Internet. Client in the guess vlan is able to ping other vlan(different subnet...

Hi,I'm just evaluating ACS 5.1 for the first time. I'm trying to use EAP-TLS for machine authentication, and use AD to look up group membership for Computer Accounts to determine authorization.The problem I'm having is that ACS is authenticating the ...

Hello,I'm working on a test rollout of 802.1x. I have a few (hopefully quick) questions that I can't seem to find in the docs...1) Is there a way to configure a switch to use two separate RADIUS servers, one for auth/authen and one for accounting?2) ...

I have one set of ASA's with users who need to hit two different identity stores on the ACS.  One group is normal users hitting Active Directory via LDAP, which currently works perfectly.  I need to add a group of users that will be application based...

We are working on installing ACS 5.0 through VPN and on an applicance. We are concerned about giving full windows domain admin rights to a generic account. What are security features are required to give the ID what it needs to authenticate through t...

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Normale Tabelle"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin:0cm; mso-para-margin...

HiWe are using ACS 5.0 and enabled dot1x , the access switch are configured dot1x port based auth , we are getting error 24427 Access to Active Directory failed ,the isssue could be the ACS is not talking to AD , but the test connection was sucessful...