Network Access Control

Hi, I'm trying to get remote access solution working with RSA Security OTP (tokens). One option I've tried is specifying 'ppp authen chap pap dialin one-time' on dialer / group asyn interfaces (where dialin is method list name and methods specified...

After successfully implementing Cisco Secure ACS v2.6, I noticed an error in the "FAILURE" logs for one of the 5300s. It states "dnis:974xxxx Authorization failure...user unknow". This device pools lines into an ISDN incoming line. It seems everyt...

I am using ACS 2.6 NT. I am using Radius Auth and Acct. I have entries in Passed and Failed logs. I also get stop and start data in my Radius Accting log. I am unable to get any data viewing Logged-in users report. While users are actively on the...

I've installed on a member server (Win 2K Serv. SP2) Cisco Secure ACS 2.6.The ACS service was installed using the domain administrator account.All the ACS's services are configured in the Log on as: Local Systems account (not the domain administrator...

i have a problem which is i have a server when any one open from internet http session it ask for ahtentication , but when he use https it does not ask for authentication (bypass).the question could is thier a way to authenticate https

I have successfully configured a VPN 3005 using the internal database to authenticate remote users. My end-user population is growing so I want to be able to authenticate remote users against our NT domain. I have tried unsuccessfully to configure ...

Dear Tech,We are having Cisco Secure 2.6 and it is using Windows NT Database, We have Pix firewall 5.1, Cisco Secure is configured for single session in group settings that are mapped to Windows NT Groups, initially it worked fine and denying multi s...

Greetings,Issue: Users accessing http authenticating via ACS-NT 2.4 off of a PIX 520.At times, all users are not presented with a challenge to authenticate until we reboot the PIX. ACS is functioning fine at these times. At other times, the user i...

Can a Pix talk directly to Windows NT Domain or Active Directory for user authentication purposes? In other words can it do it *without* connecting via a RADIUS or TACACS program placed in between (such as Cisco Secure ACS)?

I'm using VPN 3030 Concentrator and Cisco ACS 2.6 NT as radius server.I found that the CiscoSecure cannot authenticate Win98/ME VPN clients if the WindowsNT domain name is entered on the clients PC. The following error message was appeared on the cl...

I'm using VPN 3030 Concentrator and Cisco ACS 2.6 NT as radius server.I found that the CiscoSecure cannot authenticate Win98/ME VPN clients if the WindowsNT domain name is entered on the clients PC. The following error message was appeared on the cl...

Has anyone done this before? I am trying to set up a VPN for off-site cable/dsl users so that they can gain access to our on-site resources. I haven't been able to come across anything regarding user authentication and NIS+, so I am unsure if the C...

We are testing with ACS 2.6 server for LEAP authentication for AP340 series Access points and WLAN clients and configured to authenticate against NT user database (using external database). As recommended for dynamic WEP Keys we have set the Option 2...

This is the scenario: 2 networks, one whith servers plus firewall, other with users and firewall to access to servers. We pretend something like give a card or key to the user to access to remote servers and when is gone (out), key or card return to ...

i am doing a site-to-site vpn experiment with two router.one is 3660(Ra).another is provided by other(Rb).if Ra initiates the negotiation, a new isakmp sa can be got but authentication fails.otherwise Rb is the initiator, the isakmp sa negotiation ca...