Network Access Control

Hi all,I have managed to install and configure ACS 2.3.6 in a Solaris.I am able to telnet in many diff routers such as 7004VXR, 3600, Catalyst Switces and so on. I am also able to telnet in both of our three GSRs. My problem is tha in the last GSR wh...

I was looking to use Apache 1.3.24 as my backend for this task as I don't trust M$'s IIS enough to install it for a security server. I tested an install last night and got some of the pages to load for the change password interface. I was just wond...

Dear All,How do we authenticate a citrix ica traffic (port 1494) across the pix (from outside to inside using a public ip address). I have cisco acs authenticating the http/ftp but i dont know how to authenticate based on a port 1494 access ?when a u...

As part of setting up our Outlook Web Access (for Exchange 5.5) server in our DMZ, we're opening ports as described in Microsoft TechNet articles Q179442 and Q259240. We've created a static to bring one of our domain controllers into the DMZ's addre...

Hi Folks:Is there any way to customize the user interface for authentication on pix.Here is what I want to.I have a segment that has wireless accesspoints connecting the users to our network that is inside of PIX. I want anybody who is going out from...

I was wondering, when you intially log into the ACS for admin purposes, is the password that is sent to the ACS server encrypted. If so, what type of encryption ?

We have a PIX 515 connecting to a Win2000 server for a site to site VPN connection.The VPN user is accessing a development network on a secondary interface (not inside interface) of the PIX.We already have access-lists on the PIX to limit where the V...

Hi Guys,We currently using PIX 520 with code 6.1 to terminated 3.5 vpn clients. Initially I was able to establish a secure connection from the client to the pix and access the resource on the inside network. However, when I added our tacacs server fo...

I'm trying to use radius to authenticate a PPPoE session. The requestto authenticate was hit at radius but it was not able astablish connection.Please refer to the log below.From Radius log file(IMS)09.04.2002 17.26.25-823 RADIUS[ 377] DBG ----- [Wo...

I created a custom signature to detect telnet authentication failure. It belongs to STRING.TCP engine.Here are the signature's parameters:SID 20005, Engine: STRING.TCP1 - AlarmThrottle = FireAll 2 - ChokeThreshold = 3 - Direction ...

Is it possible to setup the CiscoACS to authenticate admin's, via the web browser, when they try to access Wireless Access Points

Yesterday I was that ACS2.6/3.0 have Security Vulnerabilities, Can some one tell me what they are, wher to get the fix or patches for it.Thks, Sarkis

Here is the scenario:1) We have a group of people that manage all network equipment and need full access to each of these devices.2) We have another group that only needs user access to 2 of these network devices for doing 'show' commands.I have been...

I was looking for a certain features that was reported for me by some customers. I hope someone has noticed those:1- When the ACS assign the ip address for the users from a pool defined in the ACS, how can I know which user take which IP. If I check ...

Hi,We have a site-to-site VPN tunnel created between two sites using two PIX's running version 6.1(1) software. We want the users from the remote network to be authenticated using RADIUS / TACACS+ server before they can access the network (for any IP...