-
User Guide for Cisco Secure Access Control Server 4.2
-
Preface
-
List of Tables
-
Overview
-
Web Interface
-
Network Configuration
-
Shared Profile Components
-
Group Management
-
User Management
-
System Configuration Basic
-
System Configuration Advanced
-
System Configuration Authentication
-
Logging and Reports
-
Administration
-
External Databases
-
Posture Validation
-
Network Access Profiles
-
Unknown User
-
Group Mapping
-
T+ Attributes
-
RADIUS Attributes
-
CS Utility
-
Virtual Private Dial-up Network
-
RDBMS
-
Architecture
-
Index
-
Feedback
Table Of Contents
Obtaining Documentation and Submitting a Service Request
Preface
Audience
This guide is for security administrators who use ACS, and who set up and maintain network and application security.
Organization
Note
This release of the User Guide combines the Windows and Solution Engine platforms. Where necessary, the appropriate platform is clearly identified.
This document contains the following chapters and appendixes:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Conventions
This document uses the following conventions:
Tip
Note
Caution
Documentation Updates
Table 1 Updates to the User Guide for Cisco Secure Access Control Server 4.2
01/03/2012
Updated action code description for the action code 108 in the table Table E-3 User Creation and Modification Action Codes.
11/22/2010
Updated "Configuring a Generic LDAP External User Database" section for the bug CSCtj40421.
9/20/2010
Updated the following sections:
•
•
6/16/2010
Updated the following sections:
•
4/16/2010
Updated the User and group database component in Table 8-1.
4/08/2010
1/29/2010
Added a note in the "TACACS+" section.
Product Documentation
Note
describes the product documentation that is available.
Table 2 Product Documentation
Documentation Guide for Cisco Secure ACS Release 4.2
•
•
•
Release Notes for Cisco Secure ACS Release 4.2
•
Configuration Guide for Cisco Secure ACS Release 4.2
•
•
Installation Guide for Cisco Secure ACS for Windows Release 4.2
•
•
Installation Guide for Cisco Secure ACS Solution Engine Release 4.2
•
•
User Guide for Cisco Secure Access Control Server 4.2
•
•
You can also access the user guide by clicking Online Documentation in the ACS navigation bar. The user guide PDF is available on this page by clicking View PDF.
Regulatory Compliance and Safety Information for the Cisco Secure ACS Solution Engine Release 4.2
•
•
•
Installation and Configuration Guide for Cisco Secure ACS Remote Agents Release 4.2
•
•
Supported and Interoperable Devices and Software Tables for Cisco Secure ACS Solution Engine Release 4.2
•
•
Installation and User Guide for Cisco Secure ACS User-Changeable Passwords
•
•
Cisco Secure Access Control Server Troubleshooting Guide
•
Online Documentation
In the ACS HTML interface, click Online Documentation.
Online Help
In the ACS HTML interface, online help appears in the right-hand frame when you are configuring a feature.
Related Documentation
Note
A set of white papers about ACS are available on Cisco.com at:
http://www.cisco.com/warp/public/cc/pd/sqsw/sq/tech/index.shtml
For information on Network Admission Control, various NAC components, and ACS see:
http://www.cisco.com/go/NAC
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.
Notices
The following notices pertain to this software license.
OpenSSL/Open SSL Project
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
License Issues
The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.
OpenSSL License:
Copyright © 1998-2007 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
4.
5.
6.
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).
Original SSLeay License:
Copyright © 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".
The word `cryptographic' can be left out if the routines from the library being used are not cryptography-related.
4.
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].
