Network Access Control

Has anyone experienced problems with privilege level "Enable" password authentication via ACS using RSA two factor authentication? We have recently deployed ACS and use RSA two factor authentication for the telnet connection without any problems. Whe...

Hi, Gurus.we have ACS SE 4.1, configured NAP. The Profile should match the NAF and username. If I set ANY to NAF then it works fine, but if I set any NAF that contains required device or device group I don't match NAP and receive default settings.Wha...

HiI have 2 ACS SE 4.1 servers implemented to perform redundancy to client's authentication.The problem that I have is:I configured the 2 engines with IP addresses and also internal DB replication so the Primary ACS send replication data to the Second...

Hi, I have a WEBVPN (on Cisco 2811) which will authenticate its client using ACS, ACS in turn will be integrated with AD.the three components (WEBVPN, ACS and AD) have a firewall in between them, I need to configure to allow the communication between...

In response to the RADIUS request with PEAP/GTC sent by my client, in phase 2 exchange cisco ACS is showing a message which saysGenericEAP.dll->AuthenticationExtension] returned [13 - discard]what does this message mean? How can i change ACS configur...

What is the command so that when the username + password cannot be found in the microsoft isa server, the pix will look at the local database?This command works in the router, but I cannot seem to find the equivlant for the pix.aaa authentication log...

Hi, all I have setup a lab for aaa auth-proxy, ASA5510 version is 7.0, ACS 4.0; There are two problems as below: 1, after successful authentication by https via ASA's virtual services, the prompt page flash quickly, which even we didn't have time to ...

I'm in the process of setting up TACACS+ AAA for our routers, which as a matter of policy use ssh instead of telnet for VTY access. It works correctly for telnet but not for ssh, though. The relevant parts of the config includeaaa new-model!aaa authe...

hi guysis possibe that cisco ACS give me a complete report of users internet usage and their visited sites?if not please introduce me a software to do taht and works with cisco routers.thank you

DEar Team,I have integrated Windows AD with CS ACS 4.1. When I am trying to login with the user in AD, " Windows Domain Controller Not found" this error is shown in failed authentication.Kindly suggest me the configuration tips

I have an ACS 1113 device at a remote site that I am trying to configure using hyperterm. I have a laptop connected on the com 1 port to the serial port on the ACS device and I am able to get connected. My problem is when I try to login at the prompt...

Hi All, We use Cisco Secure Services Client, we are currently using 4.2, 4.051 and 4.2.1. We found that going from 4.051 to 4.2 really fixed a lot of issues but it broke one major option. Going from 4.051 to 4.2 or 4.2.1 the client does not allow the...

How can i enable message Authenticator attribute in cisco switch which gives additional security when doing authentication with MS IAS. I can enable that attribute in MS IAS when doing cisco switch as client but how can i enable that attribute in cis...