Securing ACS 3.3.3 on Windows 2003

[robinmanke]

I am looking to secure the access to ACS 3.3.3 on a Windows 2003 SP1 server. I am running only radius and access to an external Windows database. Currently I am looking to allow:

- tcp 2000 -> ACS replication

- udp 1645 -> RADIUS authen & author

- udp 1646 -> RADIUS accounting

- tcp 443 to port 2002 -> management

What I am trying to figure out is what I need open for the Windows external database. MSCHAP v.2 requires TCP 1723. Is that all that is needed?

Any advice would be greatly appreciated.

[didyap]

The performance capabilities of Cisco Secure ACS are largely dependent upon the Windows server it is installed upon, your network topology and network management, the selection of user databases, and other factors.

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/o.htm#wp792404