CiscoSecure ACS 2.3 install

Similar Questions

• CiscoSecure ACS UCP request help needed

  I upgraded CiscoSecure ACS from 4.1 to 4.2, CiscoSecure ACS UCP running application that has been configured to install ACS 4.1, so I that I need to change the Application of UCP or it works perfectly?

  I check the logs of database replication it says "cannot replicate to"wirelesspwd"- server replies do not.

  Thank you

  ALMAS Sangaré

  Both should run on the same version so if you upgraded ACS version then you need to upgrade the UCP version too.

  UCP 4.2 installation guide

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/user_passwords/UCP.html

  Kind regards

  Jousset

  The rate of useful messages-

• ACS 5.2 install VMware - no management via https

  I installed ACS 5.2 on VMware. Everything seemed to install correctly.

  I can access the server by SSH via network. The server however

  doesn´t seem to have https mangagment open.

  For example see the ports give single port 22 (ssh)

  and 111 for udp and tcp.

  I restarted everything. But charge it on the CLI and

  turn on/off the VMware host but no luck.

  I see people haven´t I have this problem but I've seen all the answers yet.

  David,

  If you have an ACS 5.x installed with 60 GB HARD drive, then you should use it with a license evaluation and on a lab environment. That is right. The requirements I've included are intended for a Production ACS 5.x server.

  In addition, ACS 5.1 and 5.2 do not include support on ESXi 4.1. 5.3 GBA includes support on ESXi 4.1 but ACS 5.1 and 5.2 until ESX 4.0.

  Kind regards.

• CiscoSecure ACS RADIUS logs upload on FTP Server v4.2

  Hello

  I use an appliance v4.2 CiscoSecure ACS, in this sort as RADIUS logs upload on FTP server because it has limitation for storing RADIUS logs.

  Please advice.

  Thank you

  AS

  You can only configure logging remotely. The Cisco Secure ACS Solution engine devices configured to use remote agent send the record directly on the logging of remote agent service, CSLogAgent data. CSLogAgent wrote logging hard disk data to the location specified by the configuration provider. The logs contain the columns specified by the configuration provider.

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/LgsRpts.html#wp703058

  Jatin kone
  -Does the rate of useful messages-

• CiscoSecure ACS 4.2 could not start due to failure of the services start bit

  There are few services that wasn't able to restart, they are as follows:-

  (1) CSAuth

  Error:-"Windows could not start the csauth on local computer. For more information, see the system event log. If it is

  a non-Microsoft service, contact the service vendor and refer to service 1060 "specific error code

  (2) CSTacacs

  Error:-"Windows failed to start the cstacacs on the local computer. For more information, see the system event log. If it is

  a non-Microsoft service, contact the service vendor and refer to service 1066 "specific error code

  (3) CSRadius = start

  the rest of services like CSAdmin, CSDbSync, case were lit.

  Also I am not able to take the acs system backup of the System Configuration-> ACS Backup and pressing backup now. It shows the msg of error as

  : - CSAuth service must be running to start the backup

  I was referring to the snapshots of the OS itself, but I guess you checked now.

  Do not forget that the case works so you should see logs for services that do not work. Learn about the \CSAuth\logs folder for logs CSAuth and other records for other services that do not work.

  There is a located here very detailed troubleshooting guide:

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...

  This guide should help you solve the question if there is no other software on the server to cause trouble. One thing it says who can apply to you is to ensure that the Windows Firewall as connection sharing Internet is not ongoing.

  Because I am familiar with your server, I think you should do the quick test below for if sure there are not taken, which may be crashing the authentication services that you mentioned. In the command line, type "netstat - ano | Findstr Listening-i"and see if or not he has taken open your ports Ganymede + and radius. He will probably return false, but it's worth a check.

  Worst case scenario, you may be able to use CSUtil to back up the database (I'm fairly certain you can back up services that work), install the ACS on a new Windows 2003 server, and then restore. You can use CSUtil to many types of exports and operations as well.

  If you manage to deal with the problem or not, you should speak with the person who is responsible for making backups of your servers and make sure that something like this was coming once again that you can have a quick fix during a maintenance window.

• ACS 4.2 install question - need help

  Hello

  Once installed the 4.2 of the ACS, the ACS HTML interface leave empty when accessd locally using the icon from the desktop or by typing http://127.0.01:2002, so I'm not able to configure the user name and password.

  When I accessd GBA from another host by: http:// 10.1.115.222:2002 (the 10.1.115.222 is the ACS server address), the prompt "username" and "password" appeared. But not able to loggin as I don't have username and password configured.

  When I tried to access locally by: http://10.1.115.222:2002, IE still leave empty.

  Note: OS: Server 2003 in vmware esx, IE 8.0, Java,.

  Thanks in advance!

  Please go to ACS--> Admin---> political Session control and uncheck--> allow local access auto connection

  Now try to connect.

  Kind regards

  ~ JG

  Note the useful messages

• Remote agent ACS - can I install on windows server 2003 64-bit

  I have Setup tehfor customer 4.2 ACS to authenticate the client wirneless, ACS have to communitate with AD (windows 2003, Enterprise Edition, 64 - bit). Can I install remote agent (ACS 4.2) for ACS ACS can contact the AD to do?

  Please help me.

  Currently we do not support 64 bit OS.

  Kind regards

  ~ JG

  Note the useful messages

• CiscoSecure ACS v3.1 - email separators?

  All,

  We would like to add more than one e-mail address to the ACS Email event logging using the:

  Management System-> Management Service ACS

  We tried the obvious delimiters between e-mail addresses, but they seem to all fail.

  Can someone tell what to do to get event notifications sent to multiple e-mail addresses.

  Kind regards

  Fred.

  AFAIK ACS will be able to send an email to a person, since he basically just send the Telnet to port 25 on any SMTP server you specify and cut/pastes, everything you typed in the To: field. If you telnet to port 25 on your SMTP server and:

  HELO

  MAIL to: [email protected] / * /; [email protected] / * /

  (where "[email protected] / * /;") [email protected] / * /"(est exactement ce que vous avez tapé dans sur l'écran de config ACS) it will probably complain." There is nothing within the AEC to make suddenly send two emails using two different MAIL to: orders just because you entered a delimiter in the field.

  Around that, the easiest method is to simply create an internal e-mail alias and send the email so that your SMTP server will then manage the distribution to that of this alias.

• Impossible to install ACS 3.3.3

  I put my 3.3.2 to 3.3.3 ACS ACS to level. I get the following error during the installation process. No idea what how to solve this problem. Thank you

  The old installation folder seems to be blocked by another application:

  c:\Program files\CiscoSecure ACS v3.3

  Please close all applications that use files or directories in this folder and run the Setup again.

  Hello

  The error we receive is usually caused by a huge accumulation of logs in the ACS installation folder:

  Remove all files from the following location and try again (these files are debug files, thus we donot require):

  \CSAuth\Logs

  \CSRadius\Logs

  \CSTacacs\Logs

  \CSLog\Logs

  \CSMon\Logs

  \CSAdmin\Logs

  \CSDbsync\Logs

  Please take a backup of the following folder, if the audit is required in our Organization:

  \Log

  After taking backup of this folder, please remove logs from the following location:

  \Logs\AdminAudit

  \Logs\Backup and restoration

  \Logs\DBReplicate

  Attempts to \Logs\Failed

  \Logs\RADIUS accounting

  \Logs\ServiceMonitoring

  \Logs\TACACS+ accounting

  \Logs\TACACS+ administration

  -Stop all anitvirus software that may be running.

  -At the end of the day, make sure that if you use CSMARS, and you use pnlogagent, while the service is stopped, which can be done in services.msc.

  Kind regards

  Prem

• Cisco Secure ACS 3.3 (1)-> 4.0 upgrade problems (1)

  Hi all!

  I have problems updating my primary ACS since version 3.3-> 4.0

  I always get the following error message, then it does the upgrade:

  "The record of the CiscoSecure ACS seems to be blocked by another application: C:\Program Files\CiscoSecure ACS v3.3.

  Please close all applications... blabla... »

  The thing is, I have improved my ACS backup first, and this upgrade worked like a charm.

  In both cases, both for the primary and backup I do a takeover with Dameware remote, copied the ACS 4 folder on the hard disk of the server and make the upgrade of this folder.

  As I said, the upgrade of backup server worked without a hitch.

  That's what I tried:

  1. I checked that NO application use the 3.3 ACS file and no Explorer window is open on this folder or subfolders.

  I checked using a small program called Filemon.exe from Sysinternals. According to this program, anything accessed said folder.

  I also checked it again by renaming actually ACS 3.3 file once I stop all services of the ACS. I could not rename the folder if the services have been started.

  2. I tried to stop the ACS services first and then make the configuration, got the same error.

  3. I have disabled the antivirus software, got the same error.

  Basically I am at my wits end now...

  However, I have two options:

  1. uninstall ACS 3.3, do a clean install of ACS 4.0 and import the data of all the GBA backup.

  Who would not raise by the primary association with the ACS configuration backup? So I think I will need to go on it later and make changes, if necessary?

  2 make a backup of the ACS 3.3 with csutil b

  Uninstall ACS 3.3, do a clean install of ACS 4.0 and import all the data with csutil - r

  Would this work? I've seen conflicting information here in this forum, some say that it works, the other say it's not.

  I'm a little confused why it worked so well the GBA backup but fails on the primary ACS.

  Any help would be greatly appreciated!

  Thank you!

  Ivar Thorolfsson

  Hello

  Folder lock message often appears if newspapers located in the directory of the ACS are too big.

  Move the logs of the following directories: -.

  CSAdmin\Logs

  CSAuth\Logs

  CSDBSync\Logs

  CSLog\Logs

  CSMon\Logs

  CSRadius\Logs

  CSTacacs\Logs

  Newspapers

  Then try to upgrade.

  Kind regards

  Vivek

• ACS Remote Agent

  HI guys,.

  I installed the Remote Agent ACS on my AD controller. I can add the agent to ACS... but I do not see the Windows authentication avaiable in the agent...

  The Agent runs with a service account that has all rights AD.

  Anyone able to help?

  Make sure that this worm device software and remote agent are the same.

  To display the version of CSAgent.exe, type csagent.exe - v, and then press ENTER to command line

  C:\Program Files\Cisco\CiscoSecure ACS Agent\csagent

  Kind regards

  ~ JG

• Cisco ACS 4.2: The most important to back up files?

  Dear Sir

  Can you tell me what are the most important files to back up in the Cisco ACS directory?

  Currently, I am only backup (with Symantec Backup Exec):

  C:\Program Files\CiscoSecure ACS v4.2\CSAuth\System backups

  * But, I would like to know if my server crash, can I restore the entire configuration with the files listed in the directory below? (Users, groups, groups of devices, AD, mapping, users, groups,...)

  * The Cisco ACS there change in the Windows registry?

  * Is it necessary to reinstall the Cisco ACS, if I need to put in an emergency on a new server? I guess Yes, because the installation creates services, etc.

  I ask this question because it takes time to install the patches...

  * Or, can I save all the Cisco ACS directory... On a new server, install the Cisco ACS and restore the backup?

  Thank you very much for giving me your experience about it.

  Kind regards

  You should back up the files that come from ACS backups, i.e.

  System configuration > backup GBA, the location that is specified in this section.

  And the default location is the one that already save for example "C:\Program Files\CiscoSecure ACS v4.2\CSAuth\System backups"

  In case you are required to host ACS on a new server, you would be required to re - install the complete application of the CSA and then simply take the last backup and restore in the newly installed ACS. It will be to restore everything users, group etc. to etc. of the external database mappings.

  When you install ACS on a new server, then make sure that if you run them Services ACS with a service account (this is required for the authentication of the window according to your requirement), you would be required to run new services with this account too, and which may require that go you through the following documentation.

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/Windows/postin.html#wp1041202

  Kind regards

  Prem

  Please rate if this can help!

• 4.2.0 Build update (124) Patch17 4.2.1 - ACS locked file

  I'm trying to upgrade ACS 4.2.0 to 4.2.1. When the Setup program tries to uninstall the current version of the ACS, it fails with the message "the CiscoSecure ACS file appears to be locked by another application"

  

  -ACS is installed on Win server 2003R2.

  -There is no anti-virus installed on the server

  -All application windows (Explorer,...) are closed

  -I'm the only user on this server

  Log - ACS files are reduced to 3 days History.

  ACS is integrated with RSA SecurID. Could be the cause? Should I uninstall RSA SecurID?

  Petr

  In my experience, we usually have this error due to the huge accumulation of logs in the ACS installation folder / installation directory.

  Please Remove or move all the files from the next ACS installation and then directory location try to upgrade again

  Once removed, we can recover these newspapers again.

  \CSAuth\Logs

  \CSRadius\Logs

  \CSTacacs\Logs

  \CSLog\Logs

  \CSMon\Logs

  \CSAdmin\Logs

  \CSDbsync\Logs

  Also, have we not ACS full logging in the value spent?

  Jatin kone
  -Does the rate of useful messages-

• Dashboard ASA ASDM Cisco ACS

  Hi all

  We use CiscoSecure ACS 4.2 for AAA.

  In our ASA 8.2.5 ASDM 7.3 (1) 101, if connect us with user group privilege 5, we would be unable to see the dashboard of firewall for Top 10 Services / Sources / Destinations.

  Someone knows how to have the privilege of established, essentially the Group of users that we have only in read-only, but can see the Top 10 services/sources/destinations edge ASDM

  Thank you very much

  Hi David,

  Yes you are right with privilege 5 you would be able to make these changes.

  You can use one of two methods of authorization in order to work around this limitation:

  Local database: configure command on the security privilege levels
  device. When a local user authenticates with the enable command (or logs
  with the command login), the security apparatus put this user in the
  level of privilege that is defined in the local database. The user can then
  access controls at and below the user privilege level.

  Note You can use the authorization of local control without all the users in local
  without CLI and database or enable authentication. Instead, when you enter
  enable command, you enter the enable password and security
  device puts you in level 15. You can then create enable passwords for
  all levels, so that when you enter enable n (2 to 15), security
  device puts you in the level n. These levels is not used, unless you put
  local command authorization (see "setting up order Local
  Authorization ".
  http://www.Cisco.com/c/en/us/TD/docs/security/ASA/asa80/configuration/gu...

  GANYMEDE + server: GANYMEDE Server + (ACS), to configure the controls that can be used by a user or a group after they authenticate to access CLI. All the commands that a user enters in the CLI are verified with the GANYMEDE server +:

  http://www.Cisco.com/c/en/us/support/docs/security/secure-access-control...

  It will be useful.

  Kind regards

  Aditya

  Please evaluate the useful messages.

• Uninstall ACS 4.2 fail

  I spend 4.1.4 to 4.2 ACS. I need to downgrade to 4.1.4 without reinstalling W2003 server! But when I remove the 4.2 I couldn't reinstall 4.1.4 due to "4.1.4 should be installed only on the top of 4.1.1.x or 4.1.3.x. With the help of Clean.exe utility does not solve. Registry cleaning does not resolve. I tried to look at "what was going on behind" (find the relevant locking file or register) using programs such as FileMon, RegMon anf, but without success. Thanks for any help in advance. RJ

  You must have ACS 4.1 installed before installing ACS 4.1.4. Install so ACS 4.1 then upgrade to 4.1.4