Filter
Top Products
6-24
Configuration Guide for Cisco Secure ACS 4.2
OL-14390-02
Chapter 6 Agentless Host Support Configuration Scenario
Configuration Steps for Audit Server Support
Step 4 Repeat Step 3 for additional report types as required.
Step 5 Repeat Steps 3 and 4 for the Failed Attempts report.
Configuration Steps for Audit Server Support
If you are using ACS with the NAC solution or with other applications that support the use of audit
servers, you can set up agentless host support that uses an audit server.
An audit server runs a database that can enable further authentication of the information that is used to
assign agentless host devices to user groups. For example, the categorization of devices in the LDAP
schema might set up device categories such as printer, PC, or FAX machine. The database on the audit
server can check whether a device with a specified MAC address or IP address is the type of device
associated in the database with the specified MAC address or IP address. If it is not the correct device
type, a specified authentication policy can be executed.
The mechanism that ACS 4.2 uses to communicate with audit servers in a NAC environment is called
GAME group feedback. The GAME protocol defines the GAME groups. When you configure GAME
group feedback for an audit server that is used in a NAP, you can enable the Request Device Type from
Audit Server feature. If this feature is enabled, the audit feature can request a device type from the audit
server and then check the device type against the device type that MAC authentication returns.
Configure GAME Group Feedback
To configure GAME group feedback:
Step 1 Import an audit vendor file by using CSUtil.
Step 2 Import a device-type attribute file by using CSUtil.
Step 3 Import NAC attribute-value pairs.
Step 4 Enable Posture Validation.
Step 5 In the External Posture Validation Audit Server Setup page, configure an external audit server.
Step 6 Enable GAME group feedback.
Step 7 In the external audit server posture validation setup section, configure:
• Which hosts are audited section.
• GAME group feedback.
• Device-type retrieval and mapping for vendors who have a device attribute in the RADIUS
dictionary.
Step 8 Set up a device group policy.
The detailed steps for configuring GAME group feedback are described in Enable GAME Group
Feedback, page
7-46 in Chapter 9, “NAC Configuration Scenario.”