Network Access Control

Hi thereI am trying to implement the following scenario and would like to know the best solution for me,We have 2 groups of Remote VPN users 1) support 2)Operations both using Cisco client vpn to log in remotely to our site1)When members of the suppo...

We currently have an ACS SE 1112 version 3.3.4.12. Windows Active Directory is being used to authenticate users. We have a new ACS (1113 running 4.1.1.23.5) that will be replacing this one. Regarding the new install, do I need to install a new remote...

I have an ASA firewall in which I need these requirements.There will be three local accounts defined on the ASA. I need one of these accounts to have to enter an enable password when accessing privileged enable mode. The other two accounts I want to ...

All, I have this unusual problem with a couple of switches that perform DOT1X with a pair of v4.1 ACS servers. From time to time the switches will seem to drop the secondary ACS server from their config. This is based on the output of the "sh radius ...

We currently have ACS 3.2 running on a Windows 2000 server. We want to move it to a Windows 2003 server and upgrade to 4.1. What's the best way to go about this? I have install CDs for v3.3.3 and an upgrade cd for v4.1. Should I install v3.3.3 on the...

Hi,I downloaded the ACS View install (CSCOacsvw4Eval.iso) and have tried loading it on a test VMWAre server (ver. 1.06 - Other Linux 2.6.x kernel VM). The install starts up, runs for about a minute and eventually aborts with the error;IOError: (Errno...

Hi,We have a mixed environment of cisco and nokia firewalls. we are trying to implements Cisco ACS and have got TACACS+ to work with the Pixs/ASAs. The problem is with implementing TACACS+ with the Nokias. There is no way i can see to enrol non cisco...

I am using a radius server to control VPN authentication. Everything is working well except I would like to log user login and logoff times when they happen. I can currently capture when they login but not when they logout. Can I get pointed in the r...

Is it possible to display a custom message when a user fails authentication via ACS? We deny users access to the web if they do not have a proxy server configured. If they remove the proxy settings the firewall will prompt them and display a username...

Dear All, I was trying to do RDMBS sync to create new custom VSA for Packeteer, but got the following error:"Parse Error: Reason - Unknown attribute name [SI=1 A=163 UN="" GN="Domain Users" AI="" VN="RADIUS (Packeteer)" V1="" V2="2334" V3="1"]"my acc...

hi all,Can anyone update regarding this issue quickly ?We have configured ASA 5510 with Remote access VPN, the no of users are getting increased day by day.How many local users can we have in ASA 5510 ?we will be using for Remote Access VPN authentic...

Hi, I am working on configuring a new ACS SE appliance. Can this device be configured to be a member of a domain or do we still need to load the agent on a Domain Controller?Thanks!Brad

When connecting to a Pix using SSH, are there any versions that support changing your tacacs password?

HII've setup EAP-TLS wireless for testing. We've got it doing machine authentication and that part works just fine. I'm trying to setup CSACS 4.x to check the CRL published by the 2k3 CA Server but I can't seem to get the LDAP URL to be accepted by C...