Network Access Control

Could my Windows 2000 SP4 + ACS v3.23 can install any new Windows 2000 service pack ?I'm affraid to infect ACS Service.So, I want to install firewall on this server to block malicious traffic.However, my ACS used external user database Windows 2000 f...

I am trying to set up 802.1x via the CiscoSecure 3.3 Trial for windows. I have installed the application properly and have configure the clients and configured my switch for authentication. When I go to install the certificate by follwing the instruc...

I currently have a Unix ACS. It is supported & I have been unable to find any EOL information, but the last software release was in 2002. That tells me there is no focus on the Unix ACS. We are moving to a single sign on where we will move from Nispl...

Is there a way that you can force the PIX to authenticate the user(s) who uses the site-to-site VPN? I have no problem with the VPN setup but I want to control who goes through the tunnel by using the PIX local database. With VPN client I can configu...

Does anyone use any freeware servers for aaa. I started confiduring one called FreeRadius (windows version) and I'm aving some issues... Anyway I'm looking for a freeware (preferably windows OS) AAA server. Anyone use anything other thatn the cisco a...

I use Cisco ACS 3.3 version. When i want to configure RDBMS Synchronization i can't see the table "FTP Setup Options". I needed this table to configure FTP with the purpose of adding some user options. Somebody knows the solution for this problem ?

Hi,2 questions:1. if I configured router IOS with aaa as "aaa authentication login default tacacs+ radius local", can I still configured line ( CTY, TTY, VTY and AUX ) with lower level security using "password" and "login"?2. If I used the same aaa l...

Hi!Anyone knows a workaround for changing the tacacs+ port on the routers which are gonna be controlled by tacacs, if the keyword "port" is not allowed on the "tacacs-server host x.x.x.x <port>" for the version running? any ideas beside changing the ...

We use Cisco ACS 3.3 and I was wondering if there is a way to bulk import devices in to the network configuration area instead of manually putting one in at a time?

Hello,Is the MD2 signature algorithm supported on a CSS?Thanks for a response.Kind regards,Kurt

Need help.. I'm trying to cascade a un-managed switch to a parent swith with a dot1x enabled port. IOS Ver of both switches (slave & parent ) are dot1x compliant.Config Settings of my Parent switch:dot1x system-auth-controldot1x guest-vlan supplicant...

Dear All, I am still new to the world of Cisco.I have here in My Network one Core Switch 4506 with 15 Edge Switch 3560.We configure the Core Switch with This Command :- A- ) HO-CSW-01(config)#username design privilege 15 password kabdesignB- )HO-CSW-...

I've had some problems with the ACS v3.3(1) overall in the night and/or weekend when the activity is low. the log thath shows me is the follow: "Failed to connect to any Windows authentication agent"When it happens I restart the CSA agent and it work...

Hi,I just want to confirm that to scramble the TACACS key on show run display, you put 7:(config)#tacacs-server key ?0 Specifies an UNENCRYPTED key will follow7 Specifies HIDDEN key will follow LINE The UNENCRYPTED (cleartext) shared keyService passw...