Network Access Control

Hi,Need help in configuring SPLIT tunneling on ASA and Remote Access VPN on ASA.Users will get authenticated through ASA using ACS. ACS will use AD as external Database.Just to understand where groups will be created required for Cisco VPN Client.

Hi,I'm using an acs engine 4.2 to authenticate http users by configuring the cut through proxy feature on an asa 5505. To authenticate the users, an external AD database is also used.The ACS, the AD and the remote agent are in the same vlan (inside) ...

I have configured UCP on a windows server according to the instructions mentioned in the Cisco manual.I have used a private address and the link is something like hxxp://172.16.0.51/secure/login.htmIt's perfectly alright when i access it from the int...

I'd like to hear your thoughts on whether AAA services for device administration (routers, switches, etc) should be mixed with AAA services for user services (like 802.1x) on the same server(s), or whether you think it's best to separate the two func...

Hi!Does anybody have any success with Cisco SSC and EAP-FAST in the wired network? I'm going to use NAC, so I'm trying to set up EAP-FAST. I see the pop-up window on the client to enter user credentials and I see a lot of "debug radius" messages on m...

Hi, I am trying to configure "User Groups that are exempt from passing machine authentication:". I use this for 7921 users. I have tried that if I put the user in default group and exempt the default group, it works fine.But if I put the user in grou...

Hi,My setup is woking great with One ACS Server, If I have another ACS Server as secondary then what additional configuration required on the devices and what parameters required for time-outWith IE 6.0 / 7.0 the ACS Console gets hang, currently work...

is the "AAA server group tag" the same as the proxy distribution entry.trying to setup my asa for tacacs+cisco# aaa-server ? WORD < 17 char Enter a AAA server group tag

Greetings,We have been using our ACS appliance to authenticate logging into our Cisco gear. We have been using tacacs+ and it has worked fine but I am trying to set it up using radius. I basically changed on the configs on my test switch to radius ...

Hi Gurus,I have just installed ACS 4.0 and added Routers / Firewall / AP for authentication.ACS uses AD as exernal Database.AP uses 802.1x All seems to work-well, but want to restrict access to Firewall/Routers to a specific Active Directory Group an...

The ACS SE 1112 was running base image 3.3.1 with Management and Software versions 3.3.2.2. I upgraded the Maintenance and Software to 4.1.4.13 respectively. The main screen and features never changed. Rebooted. The GUI never changed. But, under the ...

I am a little lost and have burned a lot of time on URL filtering.Setup 1812 router, IOS 12.4(15) T3, SDM 2.4In Additional Tasks I have the URL list setup. The Allow Mode is on.For my zone pair (in-zone to out-zone) I have this URL filter being appli...

HelloI have Primary ACS in Datacenter-1 and would like to have Secondary-ACS in DataCenter2 in different geographical location.Is there any other prequisite apart from same hardware / same OS version / Same ACS version???Any recommendation for such a...