Hi,
I've a PIX 535 (6.3.4) with an ACS 3.2 in place. I'm using TACACS+ with external Windows User DB for authentication. I've installed the Cisco VPN Client 4.0.3F on my PC. When I connect to the PIX a logon windows prompts for user id and password. When I enter the Windows credentials everything works fine but
1. How can I permit and deny access generally and/or to specific ip addresses/address ranges based on the user id of the Windows-Domain ?
2. I can't see usernames in the accounting logs of the ACS.