Network Access Control

We have a 2900xl with the following stats:Cisco Internetwork Operating System SoftwareIOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5.4)WC(1), MAINTENANCE INTERIM SOFTWARECopyright (c) 1986-2001 by cisco Systems, Inc.Compiled Tue 10-Jul-0...

I am using VPN client version 2, and it works fine, except that vpn client connects directly to the network and I need an extra authentication. Already enabled Radius server in one internal server and enabled aaa-server Radius protocol radiusaaa-serv...

Hi,I am new to PIX 515E. We have a mail server that enable mobile user to be able to relay outgoing mail with SMTP authentication.It works fine when the mail server was outside of PIX 515E Firewall. Now all the mobile users fail to relay mail using S...

Is it possible using ACS to not only allow users using a Cisco VPN Client the ability to authenticate to a VPN 3000 concentrator, but also the ability to change their password ? We currently use ACS 3.1(1)We are currenlty using a Win2000 domain via t...

Hi, I am using ACS 2.6 on WINNT 4.0 with sp6. Now I enable the all the logging but when I chack in Report & Activities, It's give me error that page not found. Sometime i can get the some days reports and sometime not. Please help me to get the repor...

Is it possible using ACS to not only allow users using a Cisco VPN Client the ability to authenticate to a VPN 3000 concentrator, but also the ability to change their password ? We are currenlty using a Win2000 domain via the ACS box to authenticate...

Hi,I would like to know if is possible to control/limit in the tacacs server configuration file the source ip address for a user?That is, something similar the access-group in the line vty...

Doing a threat-risk on pix-pix LAN based failover with authentication and stateful options. On the failover LAN link itself I'm seeing EGP(8) and SCSP(105) unicast traffic whilst on the actual failover interfaces I only see SCSP. This makes sense g...

I have AAA on most of our switches and I can telnet from one switch to another switch on some of the devices and from other switches I get and an error message Authentication Failed I went and checked the Failed Attempt log and the error in there is ...

Hi all,i'm trying to configure the Individual User Authentication policy on the IOS router to enable the Individual User Authentication on the PIX (EzVPN Client).Here how to enable on a PIX as EzVPN Server:http://www.cisco.com/en/US/products/sw/secur...

We have a VPN Concentrator 3000. Users securely connect to the concentrator to access Network resources. In order to improve security we have configured the concentrator to use digital certificates to authenticate VPN users, and for users to authenti...

Is it possibile to have ACS database really synchronized with an external database, that is initially having ciscosecure exporting all data to an empty database and then having ACS synchronized with it?If not is there a way to access the Ciscosecure ...

Hi!I have IDS sensors configured to use PIXs as blocking devices. Could anyone tell me how I can configure the firewalls to let the IDS sensors modify their access lists.I'd appreciate if you would point me to any good documentation about the subject...

There are two CS ACS servers configured to replicate primary & secondary. Primary is configured to send and secondary is configured to receive. It was all working untill now when I started getting errors in the secondary server only. It does not rep...