Network Access Control

I am having problems getting my Catalyst router modules (MSFC) to authenticate to my ACS server.If I do a debug on the MSFC I get the following:TAC+: send AUTHEN/START packet ver=192 id=429230155Apr 30 09:58:55.742: TAC+: Using default tacacs server-...

Currently I have a "freeware" version of ACS for UNIX. I would like to motivate the purchase of a licensed version. If any one knows where I could find a "comparative matrix" or a document that compare the two. I would greatly appreciate it. I have c...

I have several routers and switches. Authentication and exchange of keys were working without problems until yesterday evening. Nothing has changed, because only I have access to all devices and the ACS 2.3(x) machine.I have AAA in use, tacacs and ra...

I want to be able to define user and group based downloadable ACL's for access out to the Internet through a PIX 525 running PIX OS 6.2. There are about 700 users. Does anybody see any issues with this scenario?Also, how long does the downloaded AC...

Hello,I wanted to know is there way to authenticate VPN users without the ACS,such as on a PIX box or with the help of microsoft server.Thanks,Radhika

I have question about the flow of authentication for outbound and inbound users. This relates to how access rules and AAA work together.If I need to allow all users inside to access pop3 on the outside, do I need to create an access rule that follow...

Hello, I configured Tacacs+ as the authentication method for accessing my Catalysts 3524 with Telnet. This works well, with CiscoSecure V2.4 as the Tacacs server. My Cat3524 are running version 12.0(5.4)WC(1). I now try to use Tacacs+ as authenticati...

I am trying to authenticate a Windows XP client when physically connecting to a 2948G Switch.I've configured all parts to work toguether. But when the switch tries to authenticate the user (MD5 or TLS) always appears a log entry in the ACS failed au...

Hi all,I have managed to install and configure ACS 2.3.6 in a Solaris.I am able to telnet in many diff routers such as 7004VXR, 3600, Catalyst Switces and so on. I am also able to telnet in both of our three GSRs. My problem is tha in the last GSR wh...

I was looking to use Apache 1.3.24 as my backend for this task as I don't trust M$'s IIS enough to install it for a security server. I tested an install last night and got some of the pages to load for the change password interface. I was just wond...

Dear All,How do we authenticate a citrix ica traffic (port 1494) across the pix (from outside to inside using a public ip address). I have cisco acs authenticating the http/ftp but i dont know how to authenticate based on a port 1494 access ?when a u...

As part of setting up our Outlook Web Access (for Exchange 5.5) server in our DMZ, we're opening ports as described in Microsoft TechNet articles Q179442 and Q259240. We've created a static to bring one of our domain controllers into the DMZ's addre...

Hi Folks:Is there any way to customize the user interface for authentication on pix.Here is what I want to.I have a segment that has wireless accesspoints connecting the users to our network that is inside of PIX. I want anybody who is going out from...

I was wondering, when you intially log into the ACS for admin purposes, is the password that is sent to the ACS server encrypted. If so, what type of encryption ?

We have a PIX 515 connecting to a Win2000 server for a site to site VPN connection.The VPN user is accessing a development network on a secondary interface (not inside interface) of the PIX.We already have access-lists on the PIX to limit where the V...