Manuals / Cisco Systems / Computer Equipment / Network Card

Cisco Systems 4.2 manual Configure an External Posture Validation Audit Server

Models: 4.2

1 214
Download 214 pages 55.15 Kb
Page 153
Image 153

Chapter 9 NAC Configuration Scenario

Step 6: Configure an External Posture Validation Audit Server

Table 9-1

Attributes That Can Be Sent in the RADIUS-Accept Response (continued)

 

 

 

 

 

 

x

x

x

26

Vendor-Specific

Key for Status Query: MS-MPPE-Recv-Key

 

 

 

 

Microsoft = 311

Automatically sent by ACS.

x

x

x

27

Session-Timeout

Sets Revalidation Timer (in seconds)

 

 

 

 

 

 

x

x

x

29

Termination-

Action on Session Timeout

 

 

 

 

Action

(0) Default: Terminate session

 

 

 

 

 

(1) Radius-Request: Re-authenticate

 

 

 

 

 

 

x

 

 

64

Tunnel-Type

13 = VLAN

 

 

 

 

 

 

x

 

 

65

Tunnel-Medium-Type

6 = 802

 

 

 

 

 

 

x

x

x

79

EAP Message

EAP Request/Response Packet in Access

 

 

 

 

 

Request and Access Challenge:

 

 

 

 

 

- EAP Success in Access Accept

 

 

 

 

 

- EAP Failure in Access Reject

 

 

 

 

 

 

x

x

x

80

Message Authenticator

HMAC-MD5 to ensure integrity of packet.

 

 

 

 

 

 

x

 

 

81

Tunnel-Pri-

VLAN name

 

 

 

 

vate-Group-ID

 

Step 6: Configure an External Posture Validation Audit Server

A NAC-enabled network might include agentless hosts that do not have the NAC client software. ACS can defer the posture validation of the agentless hosts to an audit server. The audit server determines the posture credentials of a host without relying on the presence of a PA.

Configuring an external audit server involves two stages:

•Adding the posture attribute to the ACS internal dictionary.

•Configuring an external posture validation server (audit server).

Add the Posture Attribute to the ACS Dictionary

Before you can create an external posture validation server, you must add one or more vendor attributes to the ACS internal data dictionary. To do this, you use the bin\CSUtil tool, which is located in the ACS installation directory.

To add the posture attributes:

Step 1 Create a text file in the \Utils directory with the following format:

[attr#0] vendor-id=[your vendor id]

vendor-name=[The name of you company] application-id=6 application-name=Audit attribute-id=00003 attribute-name=Dummy-attr attribute-profile=out attribute-type=unsigned integer

 

 

Configuration Guide for Cisco Secure ACS 4.2

 

 

 

 

 

 

OL-14390-02

 

 

9-31

 

 

 

 

 

Page 152 Page 154
Page 153
Image 153
Cisco Systems 4.2 Configure an External Posture Validation Audit Server, Add the Posture Attribute to the ACS Dictionary
Page 152 Page 154

4.2 specifications

Cisco Systems, a global leader in IT and networking solutions, has consistently evolved to meet the demands of modern enterprises. One of its noteworthy offerings is Cisco Systems 4.2, a version that embodies a significant leap in networking technology and capability. With its rich set of features, Cisco Systems 4.2 caters to a wide range of industries, facilitating enhanced performance and security.

One of the main features of Cisco Systems 4.2 is its improved scalability. The architecture has been designed to support an ever-increasing number of devices and users, making it ideal for growing enterprises. The enhanced scalability allows organizations to expand their network capacities without compromising performance, ensuring seamless integration of new technologies and devices.

Another critical aspect of Cisco Systems 4.2 is its advanced security protocols. With cyber threats constantly evolving, Cisco prioritizes security in this version by offering robust features such as end-to-end encryption, improved firewall capabilities, and enhanced intrusion detection systems. These security enhancements provide organizations with peace of mind, knowing that their sensitive data and networks are well-protected from unauthorized access and potential threats.

Cisco Systems 4.2 also introduces intelligent automation features, which significantly streamline network management. Through the use of artificial intelligence and machine learning, Cisco enables organizations to automate routine tasks, reduce human error, and optimize performance. This automation not only enhances efficiency but also allows IT teams to focus on strategic initiatives rather than day-to-day maintenance.

Moreover, Cisco Systems 4.2 emphasizes infrastructure flexibility. The new architecture supports various deployment models, including on-premises, cloud, and hybrid environments. This flexibility enables organizations to adapt their networking strategies according to their specific needs and operational requirements, facilitating a more tailored approach to IT infrastructure.

Collaboration tools have also been enhanced in this version. Cisco Systems 4.2 integrates advanced communication solutions that empower teams to collaborate in real time, regardless of their geographical location. Features such as high-definition video conferencing, secure messaging, and file sharing enhance productivity and foster innovation across teams.

In summary, Cisco Systems 4.2 stands out as a forward-thinking networking solution with key features such as scalability, advanced security, intelligent automation, flexible infrastructure, and enhanced collaboration tools. These characteristics position Cisco Systems 4.2 as an invaluable asset for enterprises striving for digital transformation in an increasingly interconnected world. The ongoing innovation reflects Cisco's commitment to delivering cutting-edge technology solutions that drive business success and resilience.