As for users databases, ACS 3.2 has been tested with Windows 2000 SAM database with Service Pack 3. As far as installing it on a Windows 2003 server these are the only requirements for ACS 3.2:Hardware RequirementsFor implementation of Cisco Secure ...
To ping a device in the DMZ, first you need to allow ICMP. Next you need to create a static mapping as follows; Static (inside,dmz) inside ip inside ipThis should allow you to ping devices in the DMZ-CHEERS
The ACS supports downloadable ACLs via VSA (vender specific attributes). For example you can configure the PIX firewall for authentication against the ACS, in turn the ACS looks up the users in a database then looks at itself for per users or per gr...
I agree with you about the virtual web sites, however you could also look at it this way. Mostly all attacks are done on ports that are well known and that are default, like 80, 21, 23, 53 etc... and changing them would put more work on the hackers....