Cisco ACS IP address filtering

[skyswords]

Hi. I am currently using Cisco ACS 5.8 and am setting up vulnerability scanners in my environment. 

I would like to ask is there any way to set IP address filtering, or any similar feature to allow my scanner to do an authenticated scan. Specifically referring to only the CLI client. 

[Marvin Rhoads]

If you're asking about not requiring authentication from only the IP address of the scanner then no - I don't believe you can do that.

Many scanners will allow you to provide credentials to use (or try) with the targeted networks. You could use that and make the credentials used a local (or external identity store) account in your ACS.

[skyswords]

Hi Marvin,

Yes I have actually created an account for the scanner to use for the purpose of scanning. However, somehow I am getting unauthenticated scan, which simply means that scanner can ping the ACS, but not able to scan with the credentials. Something else is blocking.