Network Access Control

I am trying to figure this out and not getting anywhere. I want to have acs use windows AD for authentication. Then I want the AD authed user to have priv-1 access. Then type 'enable' to gain enable access to the device if they have the enable pas...

I have a production ACS system that has multiple external NT domains for authenticating users.We are bringing up a new ADS domain that I need to authenticate against. We have created the trust. The domain shows up in the domain list. When I go to ...

If you were to have all network devices authenticate via tacacs to the ACS using windows AD accounts. What would happen if ACS could not reach AD for authentication, but the network devices could still access ACS? I cant seem to find this in the d...

Hello, I have Secure acs 4.0 installed with a external UDVs / VSA group for nortel device.I have a number of administrators running on my network and I want to assign a specific administrator control over a different UDV/VSA set regardless of users/g...

Hi,I have been noticing this issue on most of the devices I touch. Here is the pertinent configuration.ip ssh ver 2ip ssh source lo0ip ssh rsa key SSH-KEY!line vty 0 15trans in telnet sshexec-time 30 0If I telnet to the device, the session will time ...

My remote users connect to a vpn 3005 and are authenticted by a CSACSE 4.0. The authentication process is done but the users have no network services. Any ideas???

I upgraded the appliance from 3.3.3 to 4.0.1.42 and the services do not start. I have nothing under "TCP Ports Opened" and "UDP Ports Opened" on the Appliance Status page. How do I start the services?I have "CiscoSecure ACS on xxxxx Is Currently Runn...

I am trying to set up NAC in such a way that if one of our VPN clients does not have a certain version of the Symantec Antivirus or higher, it will only grant them access to the proper download. My current test scenario is Cisco ACS 4.0 and a Cisco ...

I have a phenomena where a user stays forever in the "logged-in users". This happens when a certain laptop disables the connection while the AP is down/out of sight. The user stays in the list forever, what can be done to deal with this ??

Yesterday we had two ACS 4.0 servers installed on Windows 2000 Domain Controllers that were working great. ACS1 was the primary server and replication was configured to send to ACS2. ACS2 replication was configured to receive from ACS1.We lost ACS2...

Im trying to configure new 1113 appliance, but I cannot access web admin. I can access it from telnet using administrator login, but when I try administrator login on web admin login page, it failed.Any idea what happen to my appliance?Thx

I have ACS Engine 1112 version 4.0. I would like to upgrade to 4.1 to get the SYSLOG feature. I'm confused as to whether I must have a 1113 for 4.1.