Network Access Control

I have a production ACS system that has multiple external NT domains for authenticating users.We are bringing up a new ADS domain that I need to authenticate against. We have created the trust. The domain shows up in the domain list. When I go to map...

If you were to have all network devices authenticate via tacacs to the ACS using windows AD accounts. What would happen if ACS could not reach AD for authentication, but the network devices could still access ACS? I cant seem to find this in the docs...

Hello, I have Secure acs 4.0 installed with a external UDVs / VSA group for nortel device.I have a number of administrators running on my network and I want to assign a specific administrator control over a different UDV/VSA set regardless of users/g...

Hi,I have been noticing this issue on most of the devices I touch. Here is the pertinent configuration.ip ssh ver 2ip ssh source lo0ip ssh rsa key SSH-KEY!line vty 0 15trans in telnet sshexec-time 30 0If I telnet to the device, the session will time ...

My remote users connect to a vpn 3005 and are authenticted by a CSACSE 4.0. The authentication process is done but the users have no network services. Any ideas???

I upgraded the appliance from 3.3.3 to 4.0.1.42 and the services do not start. I have nothing under "TCP Ports Opened" and "UDP Ports Opened" on the Appliance Status page. How do I start the services?I have "CiscoSecure ACS on xxxxx Is Currently Runn...

I am trying to set up NAC in such a way that if one of our VPN clients does not have a certain version of the Symantec Antivirus or higher, it will only grant them access to the proper download. My current test scenario is Cisco ACS 4.0 and a Cisco V...

I have a phenomena where a user stays forever in the "logged-in users". This happens when a certain laptop disables the connection while the AP is down/out of sight. The user stays in the list forever, what can be done to deal with this ??

Yesterday we had two ACS 4.0 servers installed on Windows 2000 Domain Controllers that were working great. ACS1 was the primary server and replication was configured to send to ACS2. ACS2 replication was configured to receive from ACS1.We lost ACS2 y...

Im trying to configure new 1113 appliance, but I cannot access web admin. I can access it from telnet using administrator login, but when I try administrator login on web admin login page, it failed.Any idea what happen to my appliance?Thx

I have ACS Engine 1112 version 4.0. I would like to upgrade to 4.1 to get the SYSLOG feature. I'm confused as to whether I must have a 1113 for 4.1.

Is it possible to configure an Microsoft AD as an external Database with the ACS SE? Is a Remote Agent Required?

I have been told that ACS v.3.2 does not support PEAP with MS chap v.2 and LDAP search(Novell) Does anyone know if this is correct and if the latest version 4.1. supports it ?RegardsJohann Folkestad

I am using acs 4.0 for tacacs auth to network devices. I need to be able to force the password history to prevent users from using any of the previous 5 passwords. I see that there is an option to prevent from using the "last" one, but not 5. Can I o...