Network Access Control

I have an ASA firewall in which I need these requirements.There will be three local accounts defined on the ASA. I need one of these accounts to have to enter an enable password when accessing privileged enable mode. The other two accounts I want to ...

All, I have this unusual problem with a couple of switches that perform DOT1X with a pair of v4.1 ACS servers. From time to time the switches will seem to drop the secondary ACS server from their config. This is based on the output of the "sh radius ...

We currently have ACS 3.2 running on a Windows 2000 server. We want to move it to a Windows 2003 server and upgrade to 4.1. What's the best way to go about this? I have install CDs for v3.3.3 and an upgrade cd for v4.1. Should I install v3.3.3 on...

Hi,I downloaded the ACS View install (CSCOacsvw4Eval.iso) and have tried loading it on a test VMWAre server (ver. 1.06 - Other Linux 2.6.x kernel VM). The install starts up, runs for about a minute and eventually aborts with the error;IOError: (Errn...

Hi,We have a mixed environment of cisco and nokia firewalls. we are trying to implements Cisco ACS and have got TACACS+ to work with the Pixs/ASAs. The problem is with implementing TACACS+ with the Nokias. There is no way i can see to enrol non cisco...

I am using a radius server to control VPN authentication. Everything is working well except I would like to log user login and logoff times when they happen. I can currently capture when they login but not when they logout. Can I get pointed in the r...

Is it possible to display a custom message when a user fails authentication via ACS? We deny users access to the web if they do not have a proxy server configured. If they remove the proxy settings the firewall will prompt them and display a username...

Dear All, I was trying to do RDMBS sync to create new custom VSA for Packeteer, but got the following error:"Parse Error: Reason - Unknown attribute name [SI=1 A=163 UN="" GN="Domain Users" AI="" VN="RADIUS (Packeteer)" V1="" V2="2334" V3="1"]"my acc...

hi all,Can anyone update regarding this issue quickly ?We have configured ASA 5510 with Remote access VPN, the no of users are getting increased day by day.How many local users can we have in ASA 5510 ?we will be using for Remote Access VPN authenti...

Hi, I am working on configuring a new ACS SE appliance. Can this device be configured to be a member of a domain or do we still need to load the agent on a Domain Controller?Thanks!Brad

When connecting to a Pix using SSH, are there any versions that support changing your tacacs password?

HII've setup EAP-TLS wireless for testing. We've got it doing machine authentication and that part works just fine. I'm trying to setup CSACS 4.x to check the CRL published by the 2k3 CA Server but I can't seem to get the LDAP URL to be accepted by...

My customer has many 3560 switches configured with TACACS and several have no servers under the aaa group server tacacs+ xxxxxxxx command in running config but they are there in the startup config.Some switches do not have them in either config but n...

folksi think my acs is allocating duplicate IP addresses to remote client vpn clients so i'm gonna try using a dhcp pool on another router and point the relevant group in the acs to the routerhas anyone tried this before?i'd be grateful to hear your ...

Hi,We have 4 Cisco 831 routers that we are trying to configure for wired 802.1x authentication using CSSC (Cisco Secure service client -- free version). I was wondering what version of IOS (on 831 platform) support the dot1x critical as well as Mac-a...