Network Access Control

I want to create an admin account for our desktop support guys to be able to create PAC files only and thats it. i have tried creating one my self but even when allow all is ticked i still cannot create the pac files as it reports "access denied".Thi...

We've got a rule in our pix that authentication for outside adresses (the internet) will be via tacacs+Our tacacs server is an acs (version 3.3) and the authentication-mechanism works.In the acs we've got an external userdatabase (active directory) a...

Hi, i would like to know if there is a way to account the commands entered by certain profile log-in to the router/switch using MS IAS method? Currently i'm using IAS radius server from my switches and routers. And i'm having problem in doing an acco...

I am trying to configure ACS to authorize tacacs+ for our new ACS32 Avocent cyclades terminal server switch. I keep getting authorization failed with service denied...not sure how to proceed. Has anyone done this successfully?

I have AAA accounting enabled. I have reference both primary and secondary ACS Servers. Question is when a router/switch send an accounting log or any log for that matter, will it choose sequentially. Otherwise in order to get a comprehensive list of...

Hi,I'm trying to setup ASA5520 with Radius to authenticate users with groupprivileges.Useing Radius with ASA to authenticate users is quite simple. When I tryto pass from asa tunnel-group name (with group-policy and attributesattached) there is a pro...

We are running acs se 4.01 and whenever i turn on the remote logging to our agent, the ACS itself becomes unusable until I turn logging off again. Any ideas?

I am having issues with my Cisco 1112 Server authenticating with LDAP. I have followed the "Installtion of Cisco Secure ACS Remote Agent for Windows". I have given the service account "log on as a service" and "act as part of the os". This account is...

HelloI have an appliance ACS v4.1 and I use 802.1X PEAP authentication.All work fine for PC which are 802.1X compliant with an external database Active DirectoryBut when you wan't to authenticate a non 802.1X device such as printer, the ACS log an "I...

Hi folks.While looking at the "Failed Authentication" report I have a log entry that occurs so frequently that it blocks out 'real' authentication failures. The log entry always includes the keywords "host/" (no quotes). The ACS filter allows you to ...

Maybe you can help me here. I'm currently testing ezvpn connectivty into our MPLS network for our clients remote access LAN-to-LAN VPN. This is working fine, but I have an issue with two things.First, can I assign an IP Address to a client based on t...

hi i was trying to configure auth proxy in my router .. with acs using tacacs+.. but somewhere the authentication was failing..i had configured acs as required and i dont find any problem with it as it is succefully working with http auth proxy..conf...