Integration appliance ACS 1113 with RSA-Urgent

Similar Questions

• Cisco ACS 1113 appliance v4.1 - integration of RSA Securid v6.1

  The Windows of Cisco ACS version seems to have the ability of integration with RSA Securid its listed in external databases. It can also support the SDI Protocol if you install the agent on the Windows ACS platform. I need to use a Cisco ACS 1113 but RSA Securid does not appear in the section external databases. This mean that I won't be able to use the SDI Protocol only available RADIUS.

  And Yes you are right,

  With ACS, we need to configure using RADIUS, on ACS SE it won't work with SDI.

  Kind regards

  Prem

• ACS 5.3 integration with RSA

  Hi people,

  I joined the ACS 5.3 to AD.

  Now, my next goal is to integrate with RSA ACS so that all my Cisco devices must use the username and password of the pub.

  The enable privilege level should come from the OTP Token RSA.

  Is it possible to do such a thing with ACS 5.3?

  If yes how can I do?

  Thank you

  Maury

  I think that may try to make a rule in politics of identity based on the attribute of Service in the dictionary GANYMEDE +.

  (this is not tested and based on my memory would need your checking)

  (1) create a condition custom attribute service GANYMEDE + dictionary

  Elements of strategy > Session Conditions > Custom

  Create: Dictionary: GANYMEDE +; Attribute: Service

  (2) use generally in identity politics Device Admin

  Access policies > access > default device Admin > identity

  SSelect a rule based

  Customize the condition function 1

  Create a rule for when the Service is to 'enable '. Select the source of identity as RSA in this case

• Remote access VPN integration with RSA token

  Hello friends,

  I currently have an ASA 5520 9.0 focusing distance french authenticated VPN access a Radius of the ACS server. I also have a server ACS Ganymede + allowing to authenticate access to network devices (routers, switches, etc.). My Manager asked me to include a second level of authentication through RSA token´s. Question´s:

  How does it work?

  Can I use my ACS Ganymede + as a method of redundancy for authentication of the VPN´s in the case where my Radius server goes down?

  I can use my ACS server RADIUS as a method for redundancy for managing my network devices in the case of authentication my Ganymede + server goes down?

  In addition, the RSA token can be used to authenticate access to manage network devices?

  Any comments will be appreciated.

  Kind regards!

  RSA has built in the radius server and itself it can serve as a factor of two.

  using Token RSA server inside itself is two factor when you use a PIN and access code.

  Using of Ganymede + for VPN is not possible.

  Check with your administrator RSA for the integration steps.

  Is that you can directly integrate the ASA with RSA and integrate with RSA ACS as well.

  This way you have redundancy in the RSA server.

  http://www.Cisco.com/c/en/us/support/docs/security/secure-access-control...

  http://www.Cisco.com/c/en/us/support/docs/security-VPN/SecureID-SDI/1163...

  Rate if useful :)

  Knowledge sharing makes you immortal.

  Kind regards

  Ed

• Does Cisco ACS 1113 v4.2 device work with Windows 2008

  Hello

  I have a wireless currently in production infrastructure. All my Cisco LWAP is managed by Cisco WLC. Authentication is done via RADIUS through my device Cisco ACS 1113 running on version 4.2. The Cisco ACS 1113 device communicates with my Windows 2003 Active Directory. Everything is good now.

  Next month, we plan to update Active Directory from Windows 2003 to Windows 2008? Will be all fine and good, or will it be questions? Please advice kindly.

  I saw another post in this community that the States https://supportforums.cisco.com/thread/1003597?tstart=0. I am now confused. Help, please.

  Kind regards

  RAM

  + 60122918870

  ACS 4.2 does not work with Windows 2008R2.  I had a case of TAC open about this, and basically, they told me that I had to switch to 5.2 ACS.   I've been doing demonstrations there and it authenticates with Windows2008R2 very well.

• Cisco ACS 1113 v4.0.1.44 possibilities of reproduction have 1120 and 2nd 1113

  Hello

  We currently have 1 ACS SE 1113 running the 4.0.1.44 version that we are unable to take the Live service and we want to install a 2nd one for replication and resilience (and have the resilient pair running the 4.2.0.124 version).

  We had the following put at our disposal for this purpose an ACS SE 1113 and a CSACS 1120 times 4.2.0.124 the version currently running.

  Could you please tell if the following downgrade/upgrade process is valid (I see that the CSACS1120 does not suppot version 4.0 or 4.1).

  1. the downgrade 2nd ACS SE 1113 to version 4.0.1.44

  2. the replication between the 1113 establishment is so we now have our on-line data on both boxes.

  3. take the primary ACS out of service and confirm secondary now handles all requests.

  3. switch to level our primary ACS to version 4.1, then to the 4.2.0.124 version

  4. bring the ACS primary in-service and see works then take secondary ACS decommissioned for upgrade to version 4.1 and 4.2.0.124

  5 confirm replication now working at the 4.2.0124 version.

  Are there other methods possible to migrate our existing data directly from our existing of 1113 to one of the other devices (1113 and 1120) 4.2.0.124 running without going through the process of decommissioning/updated above.

  Thanks in advance for your help.

  Jim.

  Hi Jim,.

  I understand that you have 3 devices - 2 ACS ACS 1113 and 1120 1.

  ACS1 - 1113 4.0.1.44 - running in production.

  ACS2 - 1113 4.2.0.124 - lab running.

  ACS3 - 1120 4.2.0.124 - running in the laboratory.

  You want to configure the replication in the production environment and the transfer of the backup of the ACS1 to 4.2.0.124.

  The path mentioned in the post is correct.

  You can try to do the following:

  take backup of the ACS1. Install ACS for windows 4.0.1.44 in the laboratory. Restore the backup of the ACS1. Upgrade the windows of the ACS to 4.1.1.24 and then to 4.2.0.124 in maintaining the database.

  Restore the database on ACS2 and ACS3. Configure replication for ACS2 and ACS3.

  Take a time out and replace ACS1 with the pair of replication of ACS2 and ACS3.

  I hope this helps.

  Kind regards

  Anisha

  P.S.: Please mark this message as answered if you feel that your query is resolved. Note the useful messages.

• 4.2 ACS profiles with Ganymede?

  Hello

  I use 4.2 ACS (device) with network access profiles. It's a very big problem that profiles only support the radius Protocol, I need to use the Protocol Ganymede with profiles. I need Ganymede for permission command. Is it possible to have such a regulation on ACS 4.2:

  -If the logging of NetworkDeviceGroup1 using RADIUS uses local authentication

  -If the logging of NetworkDeviceGroup2 using Ganymede use RSA securID (external Radius Authentication).

  Best regards

  Hello

  GBA 4.X NAP works only with the RADIUS.

  -If you want you can go to ACS 5.X, which is more flexible.

  run the IT role-based authentication / authorization and you can combine roles you need to be more flexible.

  Please visit the sites:

  1) http://www.youtube.com/watch?v=Xin98O-Q4JY

  2) http://www.youtube.com/watch?v=vOxcrEU_-Gw&feature=related

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_system/5.1/user/guide/access_policies.html

  Kind regards

  Talal

  ==

  Remember responses of the rate that you find useful

  Please note the answers that you find useful and mark as answer - when is it :-) - so that others can easily find

• integration of lync 2013 with cisco vcs - c

  Hello

  I found a lot of documentation on integrating to Lync 2010 with VCS - C, but can't find much on the integration of Lync 2013.  Could someone shine some light on this for me?
  Thank you!

  Hi, David,.

  It would be preferable that you contacted Cisco re: integration

  https://supportforums.Cisco.com/thread/2181356

  Cisco PDF

  Or try to repost your question to the TechNet Forum

  http://social.technet.Microsoft.com/forums/en-us/ocsinterop/thread/319f9e94-f7ec-4c6e-994C-f5412e345e2e

• I want to show Real Player. MOV videos integrated in chronological order with still photos in Windows Photo Gallery

  Windows Photo Gallery is not showing them to, and even less integrated in chronological order with still photos, which is very annoying. The computer I use a Vista Home Premium installed. And please, if you really want to be useful for your response, do not make assumptions about my level of knowledge and explain in detail all the actions that are needed.

  Otherwise, how can I view all my photos still in windows photos. For some reason photos dated 2005 (and probably earlier, if there were) not displayed although thay appear separately if I select a specific date.

  In other words I don't like how the machine of this miserable, I just want to see all my pictures and videos in chronological order without a lot of tweaking. And if the photo library will not appear videos RealPlayer (format my videos are store automatically stored like - and how stop what happens if it's not good for the Photo Gallery?), how can I change the in a format that will work with the photo gallery?

  Rant on.

  Windows Photo Gallery is not showing them to, and even less integrated in chronological order with still photos, which is very annoying. The computer I use a Vista Home Premium installed. And please, if you really want to be useful for your response, do not make assumptions about my level of knowledge and explain in detail all the actions that are needed.

  Otherwise, how can I view all my photos still in windows photos. For some reason photos dated 2005 (and probably earlier, if there were) not displayed although thay appear separately if I select a specific date.

  In other words I don't like how the machine of this miserable, I just want to see all my pictures and videos in chronological order without a lot of tweaking. And if the photo library will not appear videos RealPlayer (format my videos are store automatically stored like - and how stop what happens if it's not good for the Photo Gallery?), how can I change the in a format that will work with the photo gallery?

  Rant on.

  ====================================
  Windows Live Photo Gallery is supposed to display Apple
  QuickTime. MOV inches if you also install QuickTime from Apple.

  (FWIW... it's always a good idea to create a system)
  Restore point before installing software or updates)

  Windows Vista - system restore: frequently asked questions
  http://Windows.Microsoft.com/en-us/Windows-Vista/system-restore-frequently-asked-questions

  Windows Live Photo Gallery 2011
  http://explore.live.com/Windows-Live-Photo-Gallery?OS=other

  Apple QuickTime
  http://www.Apple.com/QuickTime/Download/

  My camera takes the QuickTime video. How can I see them
  files in the Windows Vista Photo Gallery?
  http://blogs.msdn.com/b/PIX/archive/2007/06/05/FAQ.aspx

  Also... the free Picasa software may be worth a try:
  (Personally, I like better than WLPG)

  (FWIW... it's always a good idea to create a system)
  Restore point before installing software or updates)

  Picasa
  http://Picasa.Google.com/

  Organize your digital photos with Picasa
  http://Lifehacker.com/#! 267024/organize-your-digital-photos-with-Picasa

  To book your QuickTime. MOV files more universally
  compatible, you can try converting them to the. WMV
  format.

  There are many programs that can do conversions...
  The following freeware is an example...:

  (FWIW... it's always a good idea to create a system)
  Restore point before installing software or updates)

  Format Factory
  http://www.videohelp.com/tools/Format_Factory
  (the 'direct link' is faster)
  (the file you want to download is: > FFSetup260.zip<>
  (FWIW... installation..., you can uncheck
  ('all' boxes on the last screen)

  First, you will need to decompress the file or just open the
  Drag FFSetup260.exe out of the folder
  and drop it on your desktop. To install left click.

  Next, after the download and installation of Format
  Factory... you can open the program and
  left click on the toolbar, the "Option" button and
  "Select an output folder to" / apply / OK.
  (this is where you find your files after they)
  are converted)

  Drag and drop your video clips on the main screen...

  Select "all to WMV" / OK...

  Click on... Beginning... in the toolbar...

  That should do it...

  Good luck...

  Volunteer - MS - MVP - Digital Media Experience J - Notice_This is not tech support_I'm volunteer - Solutions that work for me may not work for you - * proceed at your own risk *.

• Web authentication with RSA SecureID on a Cisco Switch

  Hello

  I recently searched by linking in our Cisco Switch of GB 2960 S with RSA SecureID via Radius

  I already managed to tie in to ssh access

  but I failed to make it work for http / web access to the switch

  I think it's because we use 'single use' maximum security with RSA SecureID tokens

  the web interface tries to authenticate several times against the Radius server RSA SecureID part

  (agreement on the first authentication, but every time after that he's going to want a different code in token)

  I was wondering if anyone knew a way around this? (if there is a way to get the right switch authenticate once instead of multiple times the radius server)

  FYI, the switch is a WS-C2960S-24TS-L with IOS 15.0 (1) SE2

  Hello Chris,

  You can test the following configuration?

  AAA webtac_grp radius server group

  Server

  expiration of cache 1

  authorization cache profile httpauth

  hiding authentication profile httpauth

  !

  AAA authentication login httpauth cache webtac_grp group webtac_grp

  AAA authorization exec httpauth cache webtac_grp group webtac_grp

  AAA authorization network httpauth cache webtac_grp group webtac_grp

  AAA cache profile httpauth

  all the

  IP http server

  IP http authentication aaa - authentication of the connection httpauth

  IP http authentication aaa exec-authorization httpauth

  RADIUS server host key *.

  I know for sure the above configuration works when you use GANYMEDE + instead of RADIUS in order to avoid multiple guests due to the authentication of JAVA Applets to access the GUI of the IOS. I him have not tested against RSA acting as an authentication server.

  NOTE: As "aaa authorization exec" is configured the RSA should send Service-Type attribute with administrative value for it to work as expected.

  If this was helpful please note.

  Kind regards.

• How to configure IKE with RSA without this Protocol between 1760 and PIX501?

  Hello

  I have a question about authentication with RSA - SIG IKE between 1760 router and PIX501 without AC.

  .

  I found a URL between routers, but not for PIX. do I need third-party CA (public or internal) in the PIX?

  http://www.Cisco.com/warp/public/707/18.html

  .

  Please correct me if I am wrong or the return URL.

  .

  Thank you

  RSA - enc is available for IOS routers, PIX will support certificate or key pré-partagées, you might want to look at this example with a MS CA:

  http://www.Cisco.com/warp/public/707/lan_to_lan_ipsec_pix_rtr_cert.html

• Integration of MS Lync with telepresence

  Hello world. I have a question about the integration of MS Lync with telepresence. VCS - C will be sufficient for the integration with MS Lync server 2013? I heard that VCS gateway additional Lync is needed for this. And what about licensing, we need to activate the license of Microsoft on CV interoperability to make integration work?

  Would appreciate your responses.

  I would recommend that you read the deployment guide.

  http://www.Cisco.com/c/en/us/support/unified-communications/Telepresence...

  Please also search the forum, you will find several threads dealing with these issues.

  In short, the official way is to deploy a dedicated VCS - C or C-Expressway.

  But depending on the size and the friendly deployment you may have other options.

  If you want to have appropriate support, Yes, you would need the collaboration enhanced, now called

  Key to Microsoft Interoperability.

• View 5.1 with RSA Securid 7.1

  We deploy VMware View with RSA Securid 7.1 5.1. We have a RSA and RSA 7.1 installed agent on the server and display the VM VDI and to challenge the value. The View Manager is configured to use RSA according to the doc.

  http://www.RSA.com/rsasecured/guides/imp_pdfs/RSA%20SecurID%20Ready%20Implementation%20Guide-view%20Manager%203.PDF

  We also use Cisco VXC 2111 zero clients (connected to the Cisco voip phone). The thin client connects and manages to authenticate with the password. However, the client also asked that the password and then passes the user on the desktop.

  I can't find info on how to do to prevent it ask the password too. Any ideas?

  EDIT: I discovered that the Cisco VXC 2111 running 4.6 View Client. I wonder if this is the problem?

  I'll have to test it with a Wyse P20 and see if there is a difference.

  1. with RSA SecurID authentication, find password guests once SecurID authentication is complete. The password is necessary in order to perform SSO to the virtual office. If the view does not request password, SSO is not possible and the user must sign - one for each virtual desktop in any case. SecurID represents an additional authentication at the beginning of the sequence.

  2. you need not install the RSA Agent on view connection server. View has all that he needs to perform SecurID authentication against RSA Authentication manager.

  3. it is a very old document you are referencing. It's to see 3.0. See here for the latest documentation for each version of the view. http://KB.VMware.com/kb/2003455

  I hope this helps.

  Select this option.

• B2B - BAM integration does not work with the Oracle XE database

  Hello
  
  Can someone explain the reasons in detail, 'the B2B - BAM integration does not work with the database Oracle XE'?
  
  Can't we use XE POC simple to demonstrate BAM?
  
  Published by: 975946 on December 27, 2012 04:14

  Hi Nithin,

  The main reason for this Oracle XE database can't handle such a huge process. Same Oracle XE is not supported in production.
  Note that SOA requires 300 process and BAM more than 100 processes (400 total), which is in addition to any other requirement its 500 to parameter.but process during the installation of Oracle SOA RCU, I hope you gave 300 single right.so his can't handle as much load if use B2B BAM integration.

  The ultimate goal is to have need to display active data in the right BAM reports? so, if you are using Oracle XE DB its may be not possible to show the active data.that the reason Oracle recommended use / works with Oracle 10 g Oracle 11 g versions EE and EE.

  Best regards
  Siva San.

• Integration of the IPM with EBS

  Everybody, hell
  
  My IPM server: 11.1.1.3 version (linux)
  Server version: EBS R12
  
  I m following the sub process.
  
  
  Document download (for KFI) through document capture, then it goes to the IPM server.
  Then, in Server EBS, click the zoom button, browser task IPM page is open.
  Open as user1:
  Push data into EBS seeking task IPM viewer data.
  Save it in EBS. Click on the approval of the Bill, give an authorization to obtain data to a particular user.
  
  Log in as User2: not found a job.
  
  Error in the BPEL instance is as below:
  
  
  * < part name = "summary" > *.
  * < Summary > Exception occurred when the link was invoked. Exception occurred during invocation of the JCA binding: "binding JCA execute operations reference 'Get_InvoiceTransaction' have to: Interaction processing error." Error during execution of the BPEL_RETRIEVEINVOICE processing. Interaction AXF_VALIDATION_IMPORT_PKG$ RET API. An error occurred during the processing of the interaction to call the BPEL_RETRIEVEINVOICE. AXF_VALIDATION_IMPORT_PKG$ RET API. Cause: java.sql.SQLException: invalid name model: AXF. AXF_VALIDATION_IMPORT_PKG_R_I '.» The called JCA adapter threw an exception of resource. Please review the error message above carefully to determine a resolution. < / Summary > *.
  * < / piece > *.
  * < part name = 'detail' > *.
  * < model name invalid detail >: AXF. AXF_VALIDATION_IMPORT_PKG_R_I < / detail > *.
  
  
  If someone can tell what packages are used to integrate IPM and EBS.
  
  Here are the names of sql file for the integration of the IPM with EBS:
  
  PATH\CREATE_TEMP_TABLE. SQL;
  PATH\AXF_VALIDATION_IMPORT_PKG.SQL; s
  PATH\AXF_VALIDATION_IMPORT_PKG_BODY. SQL;
  PATH\AXF_PREIMPORT_CUSTOM_PKG. SQL;
  PATH\AXF_PREIMPORT_CUSTOM_PKG_BODY. SQL;
  PATH\BPEL_11G_IMPORTINVOICE. SQL;
  PATH\BPEL_PLACEIPMVALIDATIONHOLDSON. SQL;
  PATH\BPEL_PREIMPORTCLEANUP. SQL;
  PATH\BPEL_UPDATEHOLDLIST. SQL;
  PATH\BPEL_VALIDATEINVOICE. SQL;
  PATH\BPEL_RETRIEVEINVOICE. SQL;
  PATH\BPEL_GETORGID. SQL;
  PATH\EBS_CREATE_HOLD_LOOKUP. SQL;
  
  
  Please answer me ASAP.
  
  
  Regarding
  
  Jyoti

  The problem with the documentation, is that there is no mention of these SQL files that need enforcement. Those that must be performed and visible in the schema of the user of the DB that you configured in your DB Adapater. There are many stored procedures using the model of Accelerator AXF appearing in these SQL. I believe (from memory) is grant it access to one, but I do not see that in your list, and you list looks like also a bit incomplete, which version of the model are you using?