Cisco Acs 5x User Guide

Contents
xi
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Deleting Policy Rules10-39
Configuring Compound Conditions10-40
Compound Condition Building Blocks10-40
Types of Compound Conditions10-41
Using the Compound Expression Builder10-44
Security Group Access Control Pages10-45
Egress Policy Matrix Page10-45
Editing a Cell in the Egress Policy Matrix10-46
Defining a Default Policy for Egress Policy Page10-46
NDAC Policy Page10-47
NDAC Policy Properties Page10-48
Network Device Access...

Contents
xii
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Understanding Alarm Schedules12-9
Creating and Editing Alarm Schedules12-9
Assigning Alarm Schedules to Thresholds12-10
Deleting Alarm Schedules12-11
Creating, Editing, and Duplicating Alarm Thresholds12-11
Configuring General Threshold Information12-13
Configuring Threshold Criteria12-14
Passed Authentications12-14
Failed Authentications12-16
Authentication Inactivity12-18
TACACS Command Accounting12-19
TACACS Command...

Contents
xiii
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Running Catalog Reports13-11
Deleting Catalog Reports13-13
Running Named Reports 13-13
Understanding the Report_Name Page13-15
Enabling RADIUS CoA Options on a Device13-18
Changing Authorization and Disconnecting Active RADIUS Sessions13-18
Customizing Reports13-20
Restoring Reports13-20
Viewing Reports13-21
About Standard Viewer13-21
About Interactive Viewer13-21
About Interactive Viewer’s Context Menus13-21
Navigating...

Contents
xiv
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Organizing Report Data13-41
Displaying and Organizing Report Data13-41
Reordering Columns in Interactive Viewer13-42
Removing Columns13-43
Hiding or Displaying Report Items13-44
Hiding Columns13-44
Displaying Hidden Columns13-45
Merging Columns13-45
Selecting a Column from a Merged Column13-46
Sorting Data13-47
Sorting a Single Column13-47
Sorting Multiple Columns13-47
Grouping Data13-48
Adding Groups13-50
Grouping Data Based...

Contents
xv
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Modifying Charts13-76
Filtering Chart Data13-76
Changing Chart Subtype13-77
Changing Chart Formatting13-77
CHAPTER 14Troubleshooting ACS with the Monitoring & Report Viewer14-1
Available Diagnostic and Troubleshooting Tools14-1
Connectivity Tests14-1
ACS Support Bundle14-1
Expert Troubleshooter14-2
Performing Connectivity Tests14-3
Downloading ACS Support Bundles for Diagnostic Information14-4
Working with Expert...

Contents
xvi
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Configuring System Alarm Settings15-17
Configuring Alarm Syslog Targets15-17
Configuring Remote Database Settings15-17
CHAPTER 16Managing System Administrators16-1
Understanding Administrator Roles and Accounts16-2
Understanding Authentication16-3
Configuring System Administrators and Accounts16-3
Understanding Roles16-3
Permissions16-4
Predefined Roles16-4
Changing Role Associations16-5
Administrator Accounts and Role...

Contents
xvii
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Viewing and Editing a Primary Instance17-9
Viewing and Editing a Secondary Instance17-13
Deleting a Secondary Instance17-13
Activating a Secondary Instance17-14
Registering a Secondary Instance to a Primary Instance17-14
Deregistering Secondary Instances from the Distributed System Management Page17-17
Deregistering a Secondary Instance from the Deployment Operations Page17-17
Promoting a Secondary Instance from the...

Contents
xviii
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Configuring Local Server Certificates18-14
Adding Local Server Certificates18-14
Importing Server Certificates and Associating Certificates to Protocols18-15
Generating Self-Signed Certificates18-16
Generating a Certificate Signing Request18-17
Binding CA Signed Certificates18-17
Editing and Renewing Certificates18-18
Deleting Certificates18-19
Exporting Certificates18-20
Viewing Outstanding Signing Requests18-20
Configuring...

Contents
xix
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Using Log Targets19-2
Logging Categories19-2
Global and Per-Instance Logging Categories19-4
Log Message Severity Levels19-4
Local Store Target19-5
Critical Log Target19-7
Remote Syslog Server Target19-8
Monitoring and Reports Server Target19-10
Viewing Log Messages19-10
Debug Logs19-11
ACS 4.x Versus ACS 5.3 Logging19-12
APPENDIX AAAA ProtocolsA-1
Typical Use CasesA-1
Device Administration (TACACS+)A-1
Session Access Requests...

Contents
xx
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Overview of EAP-TLSB-6
User Certificate AuthenticationB-6
PKI AuthenticationB-7
PKI CredentialsB-8
PKI UsageB-8
Fixed Management CertificatesB-9
Importing Trust CertificatesB-9
Acquiring Local CertificatesB-9
Importing the ACS Server CertificateB-10
Initial Self-Signed Certificate GenerationB-10
Certificate GenerationB-10
Exporting CredentialsB-11
Credentials DistributionB-12
Hardware Replacement and CertificatesB-12
Securing...