Network Access Control

Recently my company upgraded our firewall's to a pair of 515E's in combination with Cisco ACS. So far we've only seen one real anomaly that I'd like some suggestions on. The pix is setup to require authentication in order to access the web. If a user...

Hello guys, i cann´t get tihs commad througth my PIX 535: Authorization and Accounting ------------------------------------------------------ TKFW101(config)# aaa authorization command acs1 service must be: "telnet", "ftp", "http", "tcp/0", "none", o...

With regards to the recent discovery of the above mentioned vulnerability, i am running acs v3.0 and will need to upgrade to v3.04. Is it possible to upgrade directly from v3.0 to v3.4.regardsmark weaver

I have created an interface to create user IDs using default field values. For e.g default password, groups display with drop-down boxes, default enable password , invalid login attempts.. etc.. I am populating the accountactions table in the SQL ser...

Hello,I have a very strange problem with ACS 3.1.1 server. Let us say if I enable in "Interface configuration\Advanced Options" almost all properties for users and groups, then when I open a user's properties page or a group's properties page some se...

Took the SECUR class last week. 5 pages talking about the Cisco Secure ACS Appliance but can't find anything about it on the Cisco Web site. What's up??

Hi, All the documents found on your web site about 802.1x say that you globally 3 steps :1/ Put 802.1x on an interface2/ Configure the IP address of the radius server3/ Configure aaaBut on a Catalyst 6500, which is on a Hybrid Mode (Cat OS + Router M...

Hi, when I connect my VPN Client 3.6.3 to my PIX I'd never see the authentification box so that I can't logon under WIndows XP and 2000 to my domain...What can I do to bring that login box back before the connection is completed???Because I have it u...

Hi,I was hoping someone can help me.I currently have set up out ACS servers to AAA our routers and switches for different groups of users.Can I also use the same ACS servers to manage the same people in a different group for our VPN concnetrators?Wha...

We are trying to prevent people from logging into our dial in servers multiple times with just one account.Haven't had any luck finding references on this.

I have a modem connected to a router that I use to telnet to other devices on the network and I can dial in to it but once in get in to it I can ping all the devices but I an not allowed to telnet to any of the devices I have privilaged rights on the...

I have users on an external network needing to connect servers on the inside.I would like all users to be authenticated thru AAA. All of there access to the internal servers will be through a Browser. I have configured proxy auth on a router once but...

Does anyone have a link to information on configuring the PIX to allow NT authentication from windows clients to Windows2000 AD? We are looking to create a secure connection to a business partner which wil also be installing a PIX. They are physicall...

Real quick ...Can anyone tell me the significance of an Acct-Flag entry "NAS Port re-used" might have in TACACS+ accounting?Thank you. Tom