
3-5
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 3      Interface Configuration
Advanced Options
•User-Level Network Access Restrictions—When selected, this feature 
enables the two sets of options for defining user-level, IP-based and 
CLI/DNIS-based NARs on the User Setup page.
•User-Level Downloadable ACLs—When selected, this feature enables the 
Downloadable ACLs (access control lists) section on the User Setup page.
•Default Time-of-Day/Day-of-Week Specification—When selected, this 
feature enables the default time-of-day/day-of-week access settings grid on 
the Group Setup page.
•Group-Level Shared Network Access Restrictions—When selected, this 
feature enables the Shared Profile Component NAR options on the Group 
Setup page. These options allow you to apply previously configured, named, 
IP-based and CLID/DNIS-based NARs at the group level. For information on 
defining a NAR, or NAR set, within Shared Profile Components, see Adding 
a Shared Network Access Restriction, page 5-19.
•Group-Level Network Access Restrictions—When selected, this feature 
enables the two sets of options for defining group-level, IP-based and 
CLI/DNIS-based NARs on the Group Setup page.
•Group-Level Downloadable ACLs—When selected, this feature enables the 
Downloadable ACLs section on the Group Setup page.
•Group-Level Password Aging—When selected, this feature enables the 
Password Aging section on the Group Setup page. The Password Aging 
feature enables you to force users to change their passwords.
•Max Sessions—When selected, this feature enables the Max Sessions section 
on the User Setup and Group Setup pages. The Max Sessions option sets the 
maximum number of simultaneous connections for a group or a user.
•Usage Quotas—When selected, this feature enables the Usage Quotas 
sections on the User Setup and Group Setup pages. The Usage Quotas option 
sets one or more quotas for usage by a group or a user.
•Distributed System Settings—When selected, this feature displays the AAA 
server and proxy tables on the Network Interface page. If the tables have 
information other than the defaults in them, they always appear.
•Remote Logging—When selected, this feature enables the Remote Logging 
feature on the Logging page of the System Configuration section.
•Cisco Secure ACS Database Replication—When selected, this feature 
enables the Cisco Secure ACS database replication information on the 
System Configuration page.