Network Access Control

Has anyone configured oubound http authentication with anything other than TACACS. Preferebly windows 2000 IAS or something cheaper, possibly free. What is the best way to force people to login before surfing the web

IMHO, one of the really beneficial features of the VPN 3000 series is the Individual User Authentication (IUA) feature on the 3002 HW client that can be exercised by a VPN 3000 series concentrator. Is the IUA feature supported by other EZVPN client ...

I have several IDS sensors configured to use PIXs as blocking devices for setting up shuns. Since upgrading to version 4.0 I've noticed that these sensors are authenticating to the PIXs very frequently - more than once per minute.(This may have been...

I have configured a VPN using client v3. It is configured so that upon vpn client connection a username and password box is authenticated against a tacacs server. However, this works ok but netbios (drive mapping) then fails. It works fine when not u...

For each user, under Account Disable, we have ACS set to disable each account if the user has 3 failed login attempts. Is there any way to have ACS automatically reenable an account after a certain period of time has passed?Since we enabled the acco...

I have two ACS 3.1 servers on w2k. One is just a slave and copies the DB from the master. I want to reverse their roles to lighten the load on the ciscoworks server (which is currently the primary acs box as well).Can I just reconfigure them to syn...

I've setup a router to authenticate using a RADIUS group and authorise exec locally. It all works fine but I also want local authentication if access to all RADIUS servers fail.Looking at the doc's it should be as simple as:aaa group server radius R...

Need Help !I started with aaa authentication local on Pix successfull like:aaa authentication include telnet inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication include ftp inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 LOCALaaa authentication inc...

When trying to login to ACS (3.1) I had a message stating that the maximum number of administrative connections had been reached. Eventually I had to reboot the server to fix this, doing a netstat on the W2K server revealed quite a few connections t...

I got 2 ACS Servers (version 3.1) running the same version and patches. 1 primary (send replication) and the other 1 is a secondary (receive replication). All my users is authenticated using external database (LDAP server). I got 2 LDAP servers which...

Hi,I am using a 1710 router for VPN client access. Can I use the Microsoft Windows 2000 IAS as a radius server for client authentication.Thanks.Regards,Douglas

Simple problem (yeah right): I have a 4908G-L3 router configured with two actual interfaces (no HSRP) to my networking core and a whole truckload of other interfaces and subinterfaces for my distribution and access layers (all of them HSRP). I have...

Customer need to implement AAA thru PIX,goal is to Authentified clients from Raduis Server and alsoauthorized these clients to use or no some TCP ports do i need to configure some Virtual Address on PIX inorder to achieve that ? i'm really confused h...

Can the policies created in IAS be used to push to clients that dial up into the AS5350? For instance limiting the amount of time that a user can be connected.