Network Access Control

We are using ASA, ACS, AD.The problem is the user who are in disabled group in Active directory can remote access to intranet by SSL-VPN. The ACS shows that auth fail by "External DB account disabled"I think the user block by acive directory policy a...

I have 2 Win 2003 ADs, one of them is configured and working under Windows Database (using remote agent) configuration. I am trying to setup the second AD with Generic LDAP setup. I want to know what exactly I should use in the fields UserObjectType ...

Hello,I'd like to import to my acs a file for add user.I don't know the parameter to use to define the CLI/DNIS-based access restriction.Now I use the stringADD:<user>:CSDB:<password>:PROFILE:<group-number>But I must to go to web console to restrict ...

I have just upgraded my ACS HW appliance to version 4.2. When I log into the shared profile components the CSM and Cisco works have dissappeared.How do I get them back.

HiI am trying to install a new ACS server with Radius authentication and here is below I am doing.Configured the switch with dot1x and assigned all the ports on dot1x except the ports connected to router and the server.Configured the ACS server with ...

I need to set the following password policies for accounts on ACS, where do I go to configure these? 1. password min 8 char 2.password alphanumeric 3. do not allow last 4 password, 4. after x unsuccessful logins, lock account for 5 minutes. On item #...

I'm in the process of upgrading from 3.3 to 4.1 on some vmware windows 2003 servers. I want to take advantage of the new syslog feature by sending all the accounting information to our central syslog server. However when I look in the syslog the time...

I installed ACS40 on 2003 standard edition using domain admin privilege(xyzadmin). And added this server to corporate domain as a member server.When it comes to configure ACS certificate for EAP-TLS I am confused.What is ACS server certificate?Is it ...

Hi, everyone,I am implementing two identical ACS 4.0 servers for my customer as RADIUS servers. They will be pointing to existing AD user DB by unknown user policy. Group mapping is done as well.I just got challenged by my customer to ask me to enabl...

Hallo.I'm trying to integrate this versions of CSM and ACS. CSM is installed on HW as required. ACS is virtual machine on the VMware server. When I try to switch AAA mode on CSM to acs/tacacs+ I get "AAA Client Not Configured" message, although CSM a...

Hi,Is it possible to disable a user if there is no activity over a specific time.I have about 500 users configured on ACS4.1 and i realy don't know if they are still alive. I know there is a possibility to disable users with the "password will expire...

Hello everyone,I'm very new in this, actually we have a Cisco ASA 5000 Series Firewall & we need to install and configure because we have our office in other and they need to setup a VPN connection, can anyone will help me in installing the firewall ...

I am getting this error when trying to replicate the database between two ACS SE:"Inbound database replication from ACS 'infsysacs1' denied". Does anyone have any idea's as to why It would be denied??

Hello,is there a possibility to view the number of tcp-session which are active on an acs secure appliance? Due to these hangups we have no connection to the appliance through web or console. So we are also interested in clearing the tcp-session inst...