Cisco Secure Access Control Server.pptVIP

Network Security 1 Module 5 – Cisco Secure Access Control Server Learning Objectives 5.1 Cisco Secure Access Control Server for Windows 5.2 Configuring RADIUS and TACACS+ with CSACS Module 5 – Cisco Secure Access Control Server 5.1 Cisco Secure Access Control Server for Windows Cisco Secure ACS Products What Is Cisco Secure ACS for Windows Server? Provides AAA services to network devices that function as AAA clients, such as routers, NASs, PIX Security Appliances, or VPN Concentrators Helps centralize access control and accounting, in addition to router and switch access management Allows network administrators to quickly administer accounts and globally change levels of service offerings for entire groups of users Although the use of an external user database is optional, Cisco Secure ACS for Windows Server supports many popular user repository implementations Uses the TACACS+ and RADIUS protocols to provide AAA services that ensure a secure environment Can authenticate against many popular token servers Cisco Secure ACS General Features Authentication and User Databases Cisco Secure ACS System Architecture Provides ACS to multiple Cisco authenticating devices Comprises several modular Windows 2000 services, operating together on one server Cisco?Secure ACS Windows Services CSAdmin—Provides the HTML interface for administration of Cisco?Secure ACS. CSAuth—Provides authentication services. CSDBSync—Provides synchronization of the CiscoSecure user database with an external RDBMS application. CSLog—Provides logging services, both for accounting and system activity. CSMon—Provides monitoring, recording, and notification of Cisco?Secure ACS performance, and includes automatic response to some scenarios. CSTacacs—Provides communication between TACACS+ AAA clients and the CSAuth service. CSRadius—Provides communication between RADIUS AAA clients and the CSAuth service. Cisco Secure ACS User Database Using the ACS Database Alone Using the Windows Database Using Externa