Mike, Your account team is the best party to detail that for you. I'm not sure what you have and what the migration path would be for you, but I'm sure the account team can work that out. HTH, Faisal -- If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it. ... View more

Mike, In it's current line, no, but there is the new product line shaping up for CCA which will include the ability to run in VM. That's sometime summer or fall next year. HTH, Faisal -- If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it. ... View more

Estela, What AD are you on? 2k3 or 2k8? You can try to modify it further like this: C:\Program Files\Support Tools>ktpass.exe -princ casuser/ruspdc.rus.hom.gov.uk@ RUS.HOM.GOV.UK -mapuser casuser @rus.hom.gov.uk -pass cisco123 -out c:\casuser.keytab -ptype KR B5_NT_PRINCIPAL +DesOnly HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more

Estela, Assuming that your NETBIOS domain name is RUSHOM, change the line to following: C:\Program Files\Support Tools>ktpass.exe -princ casuser/ruspdc.rus.hom.gov.uk@ RUS.HOM.GOV.UK -mapuser RUSHOM\ casuser -pass cisco123 -out c:\casuser.keytab -ptype KR B5_NT_PRINCIPAL +DesOnly HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more

Daniel, Hard to say without looking at it closely, but first thing that comes to mind is that if you have VLAN mapping configured on the CAS, it will actively bridge any packets it sees on the untrusted side (for the VLANs it's doing the mapping for) to the trusted side, and vice-versa. Perhaps you're seeing an effect of that? HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more

Daniel, Don't think so. The WSUS remediation occurs over 443/80, and if you're proxying for that, either your proxy server would need to be intelligent enough to send that traffic to your WSUS servers, or you'll have to disable the proxy for the WSUS servers. HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more

Daniel, That's what I was explaining. If you have your agent set to do AD SSO, then you need to login to the Windows Domain, and not to your local computer. If you're logging in to your local computer and want to authenticate the agent to AD, you'll have to define a LDAP auth provider and enable that in your login pages. HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more

Hello, AD SSO only works with domain credentials, and not the local user credentials. HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more

Hi, Yes. Depending on setup, it can "bounce" the port, i.e. shut/no shut it. HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more

Matt, Is this for all machines or certain ones? From the logs you provided, this snippet is interesting too: Package type is WSUS but check is against a rule Are you linking your WSUS requirement with a rule? If so, can you un-link it, since WSUS doesn't need to be linked with a rule. HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more

Hello, Under certain conditions, yes. You have to have trust between the domains, and depending on whether you are running the ACS on an appliance or a server, there's certain configurations you have to do to make it work with multi-domain authentication. Here are a few links to get you started: http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/configuration/guide/new_feats.html#wp1011301 http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/UsrDb.html#wp353805 http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/windows/postin.html#wp1041202 HTH, Faisal -- If you find this post helpful, please rate so others can find the answer easily ... View more