Network Access Control

Hi All,Does ACS have any way of saying "If a user is authenticating to deviceA, use externalDB1 for the password, but if they are authenticating to deviceB, then use externalDB2"?An example of how this is practical is that our security policy dictate...

I have attatched the config for my lab router in its entirety.  The lab is air-gapped so I'm not scrubbing anything from its config.  I configured some example server groups, and the servers are dummy servers to force a failed connection so that my u...

Hey guys,I am trying to configure 802.1x on the switch and authenticate users against a Radius server. My radius server is FreeRadius running on Redhat. The authentication works fine but the switch just doesn't take the VLAN assigned by the server. I...

Hi,We would like to run the following scenario: Cisco VPN client (or Any Connect, Cisco SSL VPN client) ----> Cisco ASA 5520 -----> Cisco ACS 4.2 -----> CAT Authentication ServerThe CAT Authentication Server is a Radius Server.How do we configure the...

All,I designing an FCAPS solution for my client and I have a few questions about authentication via interal DB vs external DB.Can ACS be configured to do authentication via external DB first and fallback to the internal DB if the external DB is unava...

Hi all,I have a cisco ASA 5505 which uses an LDAP AAA Server group as a user database.My question is, by denying Dial -In access in Active Directory, or by controlling access using Remote Access Policy, will the ASA accept/deny logons? or do I have t...

Hi guys,there is a strange requirement from one of our customer,they want us to do 802.1x with mac address authentication and they dont want the pop-ups which askfor username, password and domain.is it possible??can i avoid popping up the username pa...

Accidentally the power to the ACS server was switched off and then on again. But after the power on though the device came up successfully; we are not able to manage it.We are unable to manage our ACS. We have a configuration back-up. 1)       by HTT...

Have WCS (5.2.148) - 2 WLCs. WLCs are integrated with Cisco NAC appliances. Cisco NAC authenticates against Active Directory Database when users log in. Is there any way to have WCS show those usernames in the "Username" fields? It appears that the u...

Hi,Would it be possible to pass Group Name as Custom Attribute to Sourcefire? Actually I want Sourcefire to authorize only user of one group as Administrator, and I am thinking to use Group Name as Custom Attribute.Thanks and Regards,Ahmed Shahzad.

We would like to be able to differentiate between VPN connections from iPhones and VPN connections from software clients on PCs.We currently have 1 common Groupname for VPN connections to our ASA pair, so I assumed I could create a new Groupname for ...

Hello,I added external authentication for NAC through AD by ldap." authentication against backend Ative Directory"I followed the procedure as per documentation but agents cant login now. CAS version is 4.1.3 and CCA doest show provider other then loc...