Hi,
Here is our current setup.
If users tries to access production network they are prompted by PIX for authentication, PIX pass there credentials to ACS server and if sucessfull the machine from whcih the user accessed network gets authenticated for 24 Hrs.
Here is what we are trying to achieve!
Rather then authenticated for 24 hrs we want to authenticate users on per session base ( each time they try to access production they should be prompted for authentication) this can be done by changing uauth absolute value to 0 however we want certain groups to be authenticated once in 24 hrs. we have created different groups in ACS server and tried that but everyone gets prompted for each session its look like ACS policies can not takeover the PIX uauth timer.
Any suggestion?
