Network Access Control

I'm working on a ASA and integrating it into active directory for the first time and am having trouble understanding some of the AAA concepts.if I set the AAA settings for VPN tunnel access to use LDAP authentication and authorization, I can use a do...

What is the best practice for implementing cisco ACS 3.3, RSA, Win2k3 AD.We want to use these combo to authenticate our Remote access client. Our VPN/Firewall box is a ASA5540. Thx

Hii We need to authenticate the VPN client users from windows as pix as the network device where all vpn configuration done Need the accounting for those vpn users.Thanks Manish GaurPlease guide me

i want to configuring AAA accounting using local database on cisco 2511 with the help of 2000 IAS(radius server).

Hi all,I have a ACS box with multiple Windows Group mappings. I have 3 TACACS groups configured for separate networks and a Group set up for Radius authentication. Put simply my problem is that anyone defined in the Tacacs groups can authenticate ove...

Hi,I just tried to upgrade my ACS 3.2 with an evaluation version of ACS 3.3.2.Everything has happend correctly except that when i try now to create an Activcard Token Server database, i've the following error message:"An error has occured while proce...

Hi i want the machine authentication for the easy vpn users coming from internet and acessing the compnay network and network access device which is outmost and all vpn configuration for vpn dialin users are on PIX515.does PIX does eap-tls, eap-fast ...

I'm running the CCA in out-of-band mode and attempting to have my locked down company client PC authenticate via ntlm and have the CAM move me to an employee vlan. The authentication seems to be working but the CAM doesn't rewrite the vlan on my swit...

I have an ASA-5510 with 7.1 with the needed SSL WebVPN client feature license. Reading through the documentation, group policies can be internal or external (stored on an AAA server).Reading the Cisco Security Appliance Command Line Configuration Gui...

If you have a Cisco ACS appliance running 4.0, can you have a 4.0 version of ACS running on a standard server for redundancy, or do they both have to be appliances?

I have an ACS 4.0(1) for Windows server with an internal database faling to replicate to a second 4.0(1) server over the WAN. The two sites are connected by a PIX VPN. The primary is running 7.0(4). The secondary is running 6.3(3). The ACS servers ar...

Hi all,I'm looking forward to implementing dot1x with secure acs but I also want to keep tacacs+ for command authorization (basically I also want to restrict what commands users can access). Can this be done?

Hi,I am trying to do Auth-Proxy with a Cisco router running 12.4(7) and Secure ACS Solution Engine 3.3.3.11.The router is configured as+++++++++++++++++++++aaa group server tacacs+ aus-nac-group-tacacs server-private 10.190.99.26 key xx ip tacacs sou...

users and pc authntication from aaa ,users using the defined laptop connecting using vpn based dial-up ,need authentication from acs , acs using 1.windows database for user authntication 2. certiface from the acs (eap-*) and certificate shud not be e...