This issue occurs due the presence of Cisco bug ID CSCsg97429.
In this issue, TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23. After you enter the commands on the NAS, no accounting records are seen in the TACACS+ Administration log file. Debugs on the NAS show the records as sent, and they do arrive at the ACS server, but the appropriate log file is not updated.
With ACS logging set to Full, under System Configuration > Service Control, the log file of the CSLog service shows these entries each time a command is entered on the NAS:
12/06/2006 14:22:52 U 5111 2608 Handling message at 0x010A7FF8 (339 bytes) 12/06/2006 14:22:52 A 0000 0960 Logger CSV TACACS+ Accounting: filter denies logging
In order to resolve this issue, download and install the ACS 126.96.36.199.4 accumulative patch at Cisco Downloads.
Complete these steps in order to install the patch on ACS appliance"
Stop CSAgent from CLI.
Reboot the appliance.
Issue the download command plus the IP address of the machine from the bat file that you run from the CLI of appliance, for example the download 188.8.131.52 command.
You should be asked to proceed, and choose Yes.
Then issue the upgrade command .
Once the upgrade is successfull,start CSAgent.
In order to install the patch on distribution server, complete these steps:
Hi All,What's the best and simplest way to upgrade from 2.3 to 2.7 (Think 2.3 is out of TAC support)Current deployment - Fully Distributed all appliances PAN/sPAN (3595) - pMON/sMON (3515) - 8x PSN (3515)What's the switch IOS version compatibility re...
HelloPlease here iam running with my ASA5606-x Firepower. Unfortunatly me LAN side arnt possible to reach the (ISP) Internet. Ping inside the LAN are possible also ping the firewall are ok. i think the configuration are mede simple g1/1 WAN - Outside...
Dear Community,I read in a post online recently that in some instances pushing policy to your FTD's from the FMC may cause the Snort process to restart, potentially causing traffic disruption. I was wondering if the following actions may cause traffic dis...
Hi community, I have a General Question regarding the "Basic" licensing of the ISE.We have now have similar to the DNA licenese:- Essentials- Advanage- PremierLicense band, different Terms and so on.But:Do I Need a License per device (like a switch) ...
I just setup a new ASAv in Azure and was testing AnyConnect. I can login find but once the connection is established, it disconnects my network connection. I thought maybe it was just my computer so I had someone else try it and the same thing happened.. ...