Network Access Control

Hi everyone, I'm having a wierd ACS problem for AD group mapping.The ACS is for a institution, and one student account in AD will belong to one of the following groupsAll students in ISTAll students in ASCAll students in ENGAll students in DESAll stu...

Hi, I need to create a whitelist for blocking all URLs, only permit someURL maybe 10 o 20 sites.What do I need to do that?thanks

GreetingCould anyone give me a help on setup an access for read-only user?I have ASA5520 with multi-contents and tried to configure a read-only user, who can use ASDM to monitor the box, check out all the contents rules/performance, but can not do co...

Hi,We want to use ACS to authenticate an ssh or http connection to a WLC 4403-50 4.2.99 using TACACS+. On our ACS 4.2 test server it works fine. Configured identically on an ACS 3.3 appliance we are not able to log in although we do see a successf...

I have attached the debug. From the spoke site I can telnet to the tacacs server's management port. I don't see failed attempts on the tacacs server so I get the impression that it's not making it there or back. Can someone take a look at the debug a...

Hi,There:We're using a Cisco ACS server to do a enable authentication on the Console port of a ASA, see the below for configuation...The weird thing is that we are able to authenticate a user through the Console port,but failure enable authentication...

Due to the recent security alert from Windows I wish to make sure my systems are updated, but the cisco ACS appiance (cisco 1113) runs a specialized version of win2k with console access disabled. Is there any way get the windows critical security up...

Dear all, I'm doing a 802.1x authenticated wired LAN with following items 802.1x client (Windows XP EAP-MD5 ) --> Cisco 3750 --- ACSv4.2 --ACSv4.2 (2)My goal is user is authenticated @ second ACS Server, and authorized @ the first ACS Server. It work...

I have ACS appliance 1113 with v4.2 software. How do I tight this into Active directory? Do I have to run some software on the DC server?Thanks,

Hi everyone,I wanted to know whether the following scenario is possible.a person comes into the office and he plugs in his laptop to the docking station.As soon as the pc is on his pc is authenticated using the certificate installed in his pc.and the...

The following example shows the output of the show running-config auth-prompt command: hostname(config)# show running-config auth-promptauth-prompt prompt Please login:auth-prompt accept You're in!auth-prompt reject Try again.hostname(config)# I have...

We have an ASA that uses RADIUS to authenticate VPN users. The Cisco ACS appliance hits our Active Directory domain via LDAP. My problem is bad passwords. If you enter your password wrong one time at the VPN login, the ASA/ACS tries repeatedly and...