Cisco Application :: ACE 4700 With IPS Integration?
Jan 12, 2012
We are planning to deploy a Application Controle Engine - ACE family - and need to close the gap related to OWASP threat list masures.for what i could find in the information about ACE solution it seems that ACE does'nt have OWASP relations and need to deploy a IPS (Intrusion Prevention System) which seems to hold and apply to OWASP threat list vulnerabilities.question is it possible to deploy a ACE 4710 with a IPS 4200 as one or a inline deployment scenario ?
View 1 Replies
ADVERTISEMENT
Oct 26, 2011
I'm running an ACE 4700 appliance, i have a 4 server serverfarm setup, non-ssl, with leastconns predictor...i have tried round robin as well, and nothing...
I've taken each rserver out of service, and placed back in, and still, the traffic is handed off only to 1 server...
I do have sticky persistence (IP subnet)...
View 8 Replies
View Related
Sep 17, 2008
We are evaluating the one-arm design for the ACE 4700 and need some clarifications:
1. Are there any limitations in the one-arm design and the SSL offloading
2. Can the ACE be configured with an IN and an OUT vlan to the router
CLIENT -> Router -> ACE IN -> ACE OUT -> Router -> Server Vlan
so that the SSL and the clear text traffic is in a separate Vlan?
3. In some sample configuration i saw SNAT configuration on the ACE to modify the client IP. This i assume is for instructing the return traffic from the server to go through ACE? Using SNAT we eliminate the requirement for NAT or PBR on the router? Will i still be able to insert the client IP address after the SSL offload?
View 4 Replies
View Related
Dec 8, 2011
I am tasked to Configure an ACE 4700 for SLB. This has been done and working. Am also further tasked to create a secure communication between tha ACE and Exchange server. I need the breakdown of steps required to Import certificate from the exchange server, and how to verify that things are working.
View 3 Replies
View Related
Aug 20, 2012
I have a client that I recently replaced their GSS's for and last evening I cut them over to an HA pair of ACE 4700's. After about an hour, it looks like the GSS and ACE stopped communicating with each other. When this happened, they switched back over to the old CSS appliances and everything came back up fine. Apparently this happened the last time they tried to cutover to the ACE and they contacted TAC. TAC told them the issue happened because the GSS's they were running at the time were EOL. So now, with brand new GSS's, they are experiencing the same issue.
As of now, the ACE's are offline and I cannot get into them to see what the issue may be. We tested the sites out last night after the cutover and everything seemed fine. There was one minor problem that I resolved quickly, but that was it and then we left. The client started getting emails about an hour later about their main website being down. They do have the ACE logging to a syslog server, so we will look at that to see if there is anything relavent. I suggested that we bring up a test site to use through the GSS/ACE and see what happens. They have another CSS that they can run their sites through, so this option will work without taking down all of their other sites.
View 1 Replies
View Related
Feb 6, 2013
How to configure a redirection on the ACE from HTTP to HTTPS using specific URL example [URL] to [URL], the SSL certificates were installed on the servers.
View 7 Replies
View Related
Oct 23, 2012
Im trying to configure an ACE 4700 so that SSL termination is done on the ACE and HTTP reaches the weblogic server instance. I have a working setup of a Apache reverse proxy doing SSL offloading and using a weblogic module and that works fine Was reading [URL]. Any working config example for doing this with the ACE4700
View 2 Replies
View Related
May 24, 2011
do you know what happens if you reach the limit of, for instance 100 Mbps, compression. I know that if you reach the bandwidth limit ACE will drop packets but if you configure compression what happens if you have 110 Mbps.
I supossed that ACE will compress 100 Mbps and leave 10 Mbps without compression but I don't find this information anywhere.
View 2 Replies
View Related
Apr 2, 2012
I've configure two ACE 4700 in a SLB modus http to a web server.To understand how the ACE works and to see if all are ok, I want to test it? but how?
How do I do to initiate a http connection between my test pc to the webserver through the ACE?
View 5 Replies
View Related
May 9, 2011
I have a Hp 4700 all in one wireless printer. I am able to print with no problem. I just can't copy or scan. when you first turn the pritner on it comes up with a scan/copy error. I have tired everything and nothing works.
View 1 Replies
View Related
Jan 9, 2012
Cable modem connected directly to a Dell Vostro laptop works fine. Same cable reconnected to Dell Dimension 4700 is not working. This has all been working fine for years - usually I have a wireless network with the 4700 connected to the router by Ethernet cable, and the Vostro connected by wireless, but I have removed the router to close in on the problem.First, I am not sure if my ip settings are correct. This is the output from 'ipconfig /all' [CODE].
View 5 Replies
View Related
Mar 1, 2012
Is integration of LMS 3.2.1 with ACS 5.3 now possible ? (I understood from this forum that early ACS 5.x could not integrate wih LMS 3.2, but that this feature would be restored at one point in time (5.1?)).
View 1 Replies
View Related
Mar 14, 2011
first i configure the ACS to Synchronize time from AD as NTP server second when i configure the integration between the ACS and AD and test the connection there is no output from this test but i see that the domain is connected and the end of the page the problem is when i try to navigate the groups by go to directory group and use select there is no output.
View 3 Replies
View Related
Apr 15, 2013
Is it possible to integrate a WLC with a NAC 4.9(1) L3 OOB? I can't find any documentation that says that it is possible or not.
View 9 Replies
View Related
Dec 24, 2012
I have Integrated the ACS 5.3 with AD.Now my next goal is to Integrate ACS with RSA in such a way that all my Cisco devices should use the username and password from the AD.The enable privilege level should come from the RSA Token OTP.Is it possible to do such a thing with ACS 5.3?
View 3 Replies
View Related
Nov 20, 2011
We have a customer who wants to configure his guest wireless network in such way that the guest should fill in a self registration form and generate the username and password themselves. For this purpose we are using cisco ISE but we don't know how to integrate it with cisco WLC.
View 1 Replies
View Related
Feb 12, 2012
Our DDM admin would like to pull device information from LMS. I've enabled DB Views (ODBC) access and tested from my desktop that I can query the data successfully. The DDM admin is telling me DDM requires access to several master tables - sysservers, sysdatabases, syslogins, etc..before he can query the RME/ANI device data. Does these master system tables are available, exposed or even exist in LMS? I can't find them.
View 1 Replies
View Related
Jun 24, 2012
We have an ACS running 4.2. I am sure that this ACS is talking to our AD database because our wireless users (using ACS as RADIUS servers) are able to log in using their Windows AD account.
However, I am not sure how ACS is integrated with AD. Our ACS is installed on a windows 2003 R2 server. I am not sure where the AD database is? ie,if AD is on the same server as ACS OR on a different server [ADs managed by different group altogether :-( ].
How is the integration done between ACS and AD when both are on the same windows server? And How is the integration done between ACS and AD when they are on different windows servers?
ACS is software installed on windows 2003 R2 server.
View 2 Replies
View Related
Jul 13, 2011
I have configured my WLC 4402 for Radius authentication using Cisco ACS server version 4.2 Patch 4. When using Local Database of ACS my Wireless Users are able to authenticate but users are not able to authenticate from External Database of Windows AD 2008 R1.
In ACS logs I am getting the this error- Authentication session timed out. Challenge not provided by client.
View 3 Replies
View Related
Jan 29, 2013
We've an issue with authorization on NCS system. NCS successfully integrated witch ACS, but there is a problem with one user. All users have equivalent rights under root. There is shell profile with all possible tasks (exported from NCS server) configured on ACS. All users exept this one (unlucky one:)) authorizes successfully. In ACS logs, authentification and authorization status for this user is passed and all attributes (policy, profile, AV-pairs e.t.c.) is the same as for another users. This 'unlucky' user gets a following message: There is surely no browser or network issue. Tried from different PCs with same result. There is no any local info related to this username on the NCS server. When i change one charecter in the username on his ACS account, everything works well.
Our ACS v
Version 5.1.0.44.X
And NCS
Version : 1.1.2.X
View 1 Replies
View Related
Nov 3, 2012
We are trying to integrate Cisco WLC 5508 and Microsoft NPS 2008 to allow users to use their AD username and password to authenticate to the wireless network.I basically followed the following document but with no luck (Appendix B): URL I'v went through some threads in this forum but also with no luck,Basically, we are recieving the follwoing error in NPS event viewer:A RADIUS message was received from RADIUS client a.a.a.a with an invalid authenticator. This is typically caused by mismatched shared secrets. Verify the configuration of the shared secret for the RADIUS client in the Network Policy Server snap-in and the configuration of the network access server.
View 2 Replies
View Related
May 26, 2013
What are the configuration required on ISE to integrate with Prime 1.3.0.20?,On PI side, I have added ISE in the below path.Design-> External Management Servers -> ISE Servers.
Apart from this anything else to be done on ??
View 4 Replies
View Related
May 15, 2011
integrated the Cisco ACS 1121 with 5.1 and AD and been able to use multiple policies to permit or deny access to different NDG? I am able to authenticate agains AD but I am having an issue with getting the policies to use the user memberOf attribute to set access levels.
View 1 Replies
View Related
Feb 5, 2013
We have cisco ACS 4.2 installed on windows 2003 with secondary ACS on another machine. Database replication is okay.We installed primary SecurID RSA authentication manager on Primary ACS and is working okay as well.
Now we installed secondary SecurID RSA authentication manager on secondary ACS.
I have copied the required dll file (aceclnt.dll) to system32 folder from secondary SecurID RSA. SecurID RSA team gave me sdconf.rec file to be uploaded on ACS, but after creating new external DB (RSA Token), I do not see the option to upload the sdconf.rec file.
So without uploading sdconf.rec file, we shut down primary ACS service and tried to connect vpn, the request goes to secondary ACS, but it always tries to communicate with primary SecurID RSA authentication manager and getting attached screen on primary RSA authentication manager.
What is the exact procedure to be carried out toconfigure cisco ACS and SecurID RSA in high availibity option ?
View 2 Replies
View Related
Jan 3, 2012
I have a scenario where we have
Cisco 1300 Outdoor APs
Cisco 3600 Indoor APs
WLC 2500
Now i need to integrate the WLC with Windows 2008 AD for authentication.The idea is to let the users authenticate via AD for accesing the wireless network.
Will the integration work with NPS?
View 2 Replies
View Related
Jun 22, 2011
provide me Step by Step procedure for integrating LDAP with ACS 5.2 .
View 1 Replies
View Related
Oct 23, 2012
know about Domino LDAP ? I would like to integrate this LDAP with Cisco ISE.I try to bind this LDAP but it does not show me anything in "Naming Context". So I cannot choose group to map into ISE.I test this on WLC. It is success to do but cannot make the same thing with Cisco ISE.Is this LDAP supports with Cisco ISE 1.1.1 ?
View 3 Replies
View Related
Aug 24, 2011
I'm attempting to integrate an acs 5v into the domain through the gui. The connection will establish, and the status will read 'connected', just as it lists the domain I've submitted. However, I can't seem to find anything listed under the directory groups, and when I run a connection test, I simply get 'Global Catalogue port status error.' Eventually, I'd like to configure this as a radius server.
View 1 Replies
View Related
Apr 10, 2012
I recently bought a Cisco WLC 2500. I want to configure a WLAN with Active directory authentication.How I can do this?
View 4 Replies
View Related
Jun 14, 2012
i need a documentation or a procedure to how make integration LMS 3.2 with microsoft active directory to make usernames of devices appear in end hosts reports.
View 2 Replies
View Related
Nov 1, 2011
I have an ACS 5,2.0.26-8 running on VM intergrated with RSA. Users are able to login using their RSA passcode for network management utilizing TACACS. The problem seam to be related with RSA token caching. Once a user login sucessful on device A using current token he can not login with the same token on another device. User must wait for a new token and then he can login again. Before moving to ACS 5.2 we were using ACS 4.2 (intergrated with the same RSA) and back then ACS 4.2 cache passcode so user where able to login on devices using the same passcode. When the token change user have to use the new one. providing the same functionality like the "Token Card Settings" Durantion option under group properties, to cache token for a specific period. The global option for caching under RSA definition on 5.2 does not solve the problem.
View 4 Replies
View Related
Mar 8, 2011
I'm currently working on ACS 5.1 to use it as AAA server for Netscout NGenius.I followed a guide for ACS 4.2 and tried to replicate the configuration settings in ACS 5.1.
- created a host profile on network devices and AAA clients having the same shared key with NGenius
- added three (3) NGenius required attributes in system administration > configuration > identity > internal users
- added attribute values to Internal User database
- created an access policy:
* identity pointing to Internal Users
- edit serverprivate.properties in NGenius server to match the requirements
I would like to have NGenius authenticate via ACS 5.1, but as of the moment there is an error message that I receive:
Unicentified error, Code=16510, Details: AV pairs do not match NGenius format ::<insert tacacs username here>, Severity 1, Code: 16510.
View 2 Replies
View Related
Apr 24, 2012
A customer uses Active Directory where some group names contain special characters (ç ~ '^). The Cisco ACS 5.2 is presenting the warnings: "Not all Active Directory user groups are retrieved successfully. One or more of thegroup's canonical name was not retrieved "(Category CSC Oacs_ Identity_ Stores_Diagnostics; code 24457).
What are the results of these warnings to the customer's network? Slow? Loss of access?
View 1 Replies
View Related
