Table Of Contents
Supported and Interoperable Devices and Software Tables for Cisco Secure ACS 4.2
Tested Network Elements and Software
Supported ACS Software Versions on the ACS SE
Windows Support for the Remote Agent
Tested Windows Security Patches
Third-Party RADIUS and TACACS+ Clients
Supported and Interoperable Devices and Software
Obtaining Documentation and Submitting a Service Request
Supported and Interoperable Devices and Software Tables for Cisco Secure ACS 4.2
Revised: March 2009, OL-14389-02Introduction
The Cisco Secure Access Control Server Release 4.2, hereafter referred to as ACS, works with hundreds of devices. Given the number of devices, this device list might significantly differ from the device lists associated with other Cisco products.
Use this list to find:
•
Tested devices and software that we support.
•
Note
For information on ACS Solution Engine (SE) hardware platforms and supported ACS software versions, see Supported ACS Software Versions on the ACS SE. For details regarding limitations and known problems, see the Release Notes for Cisco Secure ACS Release 4.2.
This document contains:
•
•
•
•
•
•
Tested Network Elements and Software
This section lists the network elements and software that were tested with ACS 4.2.
Tested Network Elements
Cisco has tested the following network elements:
•
–
–
–
–
–
–
–
–
–
–
•
–
–
–
•
–
–
•
–
–
–
–
Tested Software
Cisco has tested the following Cisco and third-party software:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Supported ACS Software Versions on the ACS SE
Table 1 indicates the ACS software versions that each Cisco Secure ACS SE platform supports.
Supported Operating Systems
ACS supports the following Windows operating systems for ACS for Windows:
•
•
•
•
•
•
•
•
•
•
•
Note
When running ACS on Windows Server 2003, you might encounter event messages that falsely indicate that ACS services have failed. Bug CSCea91690 documents this issue. For details, see the Release Notes for Cisco Secure ACS Release 4.2.
Remote Agent Support
Cisco Secure ACS 4.2 supports Cisco Secure ACS Remote Agent on the Microsoft Windows and Solaris operating systems.
Windows Support for the Remote Agent
The Remote Agent runs only on English-language versions of the Windows operating system and service pack.
SNMP Support
ACS provides Simple Network Management Protocol (SNMP) support for the appliance only. The SNMP agent provides read-only SNMP v1 and SNMP v2c support. The supported Management Information Bases (MIBs) include:
•
•
•
•
•
Note
•
•
The SNMP agent is configurable on the appliance configuration page.
Tested Windows Security Patches
Note
Security Patch Process
Cisco Systems officially supports and encourages the installation of all Microsoft security patches for Windows 2000 Server and Windows Server 2003 when they are used with Cisco Secure ACS.
Cisco experience has shown that these patches do not cause problems with the operation of Cisco Secure ACS. If the installation of security patches does cause a problem with Cisco Secure ACS, contact the Cisco TAC and we will resolve the problem as quickly as possible.
For information about our process for evaluating and releasing Microsoft security patches for Cisco Secure ACS, see the "Cisco Secure ACS Q&A" area in the Product Literature area for the Cisco Secure Access Control Server SE at http://www.cisco.com
Windows Server 2003 Patches
We tested ACS with the following Windows Server 2003 patches:
Third-Party RADIUS and TACACS+ Clients
ACS fully interoperates with third-party RADIUS and TACACS+ client devices that adhere to the governing protocols. Support for RADIUS and TACACS+ functions depends on the device-specific implementation. For example, on a specific device:
•
•
For TACACS+ devices, ACS conforms to the TACACS+ protocol as Cisco Systems defined in draft 1.78, which is available a http://www.cisco.com
For RADIUS, ACS conforms to the following Request For Comments (RFC):
•
•
•
•
•
•
•
Note
For TACACS+ devices, ACS conforms to the TACACS+ protocol as Cisco Systems defined in draft 1.78, which is available at http://www.cisco.com.
Supported and Interoperable Devices and Software
This section contains:
•
•
•
•
•
•
•
You can find information about new device support at http://www.cisco.com.
Note
Table 2 Web Browsers1
Microsoft Internet Explorer
Version 7
•
•
Tested
Microsoft Internet Explorer
Version 6.0
•
–
•
–
–
–
Tested
Microsoft Internet Explorer
Version 5.5
•
•
•
Not Tested
Mozilla Firefox
Version 2.0.0.6
•
•
•
Tested
Netscape Communicator
Version 8.0 for Microsoft Windows
•
•
Version 7.1 for Microsoft Windows
•
•
Tested
Netscape Communicator
Versions 7.0, 7.1, and 7.2 for Microsoft Windows
•
•
Not Tested
1 To use a web browser to access the ACS web interface, you must enable Java and JavaScript in the browser. You must also disable the HTTP proxy in the browser.
Table 6 Cable Devices
uBR71001
RADIUS and TACACS+ interoperability
1 Tested on version 3.2, not retested on version 3.3.
Table 7 Content Networking Devices1
CE7300/CE 7320
RADIUS and TACACS+ interoperability
CDM4600/CDM4630, CDM4650
RADIUS and TACACS+ interoperability
4400 Content Routers/CR4430
RADIUS and TACACS+ interoperability
1 Tested on version 3.2, not retested on version 3.3.
Table 9 Storage Networking Devices
MDS 9000
MDS 9216, MDS9509
RADIUS and TACACS+ interoperability
Table 11 Cisco Aironet Software (Access Points for Wireless LAN)
AP1100
RADIUS interoperability with IOS v12.3(4)JA
AP1200
RADIUS interoperability with IOS v12.3(4)JA
Table 14 Token Servers1
ActivCard Server
3.1
—
Not Tested
CRYPTOCard CRYPTOAdmin
5.16
—
Not Tested
PassGo Defender
4.1.3
—
Not Tested
RSA ACE/Server
6.0
—
Tested
RSA ACE/Server
5.2
—
Not Tested
Safeword Premier Access
3.1, 3.2
—
Tested
Vasco Vacman Server
6.0.2
—
Not Tested
1 Cisco Secure ACS uses a RADIUS interface to support all token servers, with the exception of the RSA ACE/Server.
Table 16 User Databases1
AD on Windows 2003
—
Tested with Service Pack 1
AD on Windows 2000
—
Tested with Service Pack 4
SAM on Windows 2000
—
Tested with Service Pack 4
SAM on Windows NT 4.0
—
Not Tested
LDAP
Generic
See Table 15.
Open Database Connectivity (ODBC)-compliant relational databases
—
In addition to the Windows ODBC interface, the third-party ODBC driver must be installed on the ACS server.
LEAP Proxy RADIUS servers
—
Tested
1 See also Table 14, Token Servers.
Table 17 Proxy Support
Cisco Secure ACS
—
Tested with version 4.2
Funk Steel Belted Radius
Enterprise Edition
Not Tested
VMWare ESX Server Support
ACS 4.2 has been tested on the VMWare ESX server with the following configuration:
•
•
•
•
•
•
•
The following versions of VMWare ESX are supported:
•
•
•
Notices
The following notices pertain to this software license.
OpenSSL/Open SSL Project
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
License Issues
The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.
OpenSSL License:
Copyright © 1998-2007 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
4.
5.
6.
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).
Original SSLeay License:
Copyright © 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".
The word `cryptographic' can be left out if the routines from the library being used are not cryptography-related.
4.
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.
CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R)
Supported and Interoperable Devices and Software Tables for Cisco Secure ACS 4.2
© 2008 Cisco Systems, Inc. All rights reserved.
Guest
