Network Access Control

I have a requirement to authenticate all outbound HTTP connections.I would like the user to have to authenticate once per session. By session I mean, they open the browser, point to an external site, get prompted for authentication, authenticate and ...

I am using a 3660 as a RAS solution. I am authenticating users with Cisco Secure ACS and then proxying the authentication to SecureID ACE Server. I qam using a post dial terminal window. Is there a way to change the prompt that the user sees on the c...

Hi all,Initially i have only one dailup routerA(Class B subnet) authenticate with my ACS. Then my company bought another dialup routerB(Same Class B subnet) for load balancing.Seems that now when a user dial up, he will have an entry on both the Fail...

Hi, My Pix firewall is vpn disabled. I got the new authentication key from cisco for enabling the vpn. I am planning to upgrade. Below are the steps i intend to do. Can you guide me weather the steps are correct1) Boot the Pix in the monitor mode thr...

I am having a problem being authenticated through a vpn connection utilizing Microsoft VPN software. If I bypass the router the connection is succesful, however when I go through the router the connection fails. I can see the connection on the VPN se...

Hello,we are using digital certificates to authenticate client PCs and Routers to access our VPN 3000. 1) How can we use CiscoSecure ACS (CS Unix 2.3 or CS NT 2.6 or CS NT 3.0) to do accounting ? Do we have to configure each user and group in additio...

I'm having problems with the CiscoSecure ACS GUI.From the main screen, I select 'Member'. Whenever I try to Add, Edit, or Delete a user, the browser (Netscape) justs waits on "Connecting: <host>:9090 contacted. Waiting for a reply ...". When I try to...

If I have the next scenarios :One users is connected through dialup to AS5300 which is connected to ACS 2.6 and his credit is 30 min. After 10 min. the connection between AS5300 and ACS 2.6 is down and the user close the session after this event. Wha...

I have the following problem with the way the pix authentication works . It only maps a username to a ip address. The pix only authenticates machines and not users. This is a problem because if you have 50 users who use a terminal server like win2k o...

Hi,We want to authenticate RAS users using LDAP queries on a Windows 2000 AD. We also setup a unknown user policy authenticating users using LDAP.With this configuration we are running in the problem, that all users defined in the LDAP can access our...

Anyone ever see this when trying to console in tp a Pix 520 running 4.4(5) ?I was able to telnet and console in 18 days ago.Thanks,Mitch

We have a site-to-site VPN tunnel created between two sites using two PIX's running version 6.1(1) software.We want to authenticate the users to be authenticated using RADIUS / TACACS+ server before they can access the network.Is it possible to do th...

How do I turn on the accounting for the pix so I can view users logged on via ACS. Will also need to do the same for a AS5300.

I'm using the configuration found at:http://www.cisco.com/warp/public/471/vpn3k_tacacs.htmlAnd it does not work. The concentratrator (3005) is configured so that our Cisco VPN client users authenticate against ACS, and this works just fine. What does...

From the command line using CSUtil.exe is it possible to disable a users account? Is it possible in ACS 2.6.4 or 3.x ?We want to be able to program the disabling of users account as necessary. Any suggestions would be appreciated.Thanks