Cisco Systems 4.2 Server User Manual


 
GL-1
Configuration Guide for Cisco Secure ACS 4.2
OL-14390-02
GLOSSARY
A
AAA
Authentication, Authorization, and Accounting server.-(Authentication, authorization, and accounting
is pronounced “triple-A.” An AAA server is the central server that aggregates one or more
authentication, authorization, or both decisions into a single system-authorization decision, and maps
this decision to a network-access profile for enforcement on the NAD.
Access -Accept
Response packet from the RADIUS server notifying the access server that the user is authenticated.
This packet contains the user profile, which defines the specific AAA functions assigned to the user.
Access-Challenge
Response packet from the RADIUS server requesting that the user supply additional information before
being authenticated.
Access-Request
Request packet that the access server sends to the RADIUS server requesting authentication of the user.
Accounting
Accounting in network management subsystems is responsible for collecting network data relating to
resource usage.
Agentless host
processing
A method that ACS uses to process authentication requests from hosts that do not have an
authentication agent installed, such as Cisco Trust Agent.
ACL
Access Control List-Each ACL consists of a set of ACL entries.
ACE
Access Control Entry-An ACL Entry contains a type, a qualifier for the user or group to which the entry
refers, and a set of permissions. For some entry types, the qualifier for the group or users is undefined.
APT
Application Posture Token-The result of a posture validation check for a given vendor’s application.
Audit server
A server that can determine the posture credentials of a host without relying on the presence of a PA
on the host. The server must be able to determine the posture credentials of a host and act as a
posture-validation server.
Authentication
In network management security, the verification of the identity of a person or a process.
AV pair
Attribute-value pair-Encoding that the RADIUS protocol uses to specify an action that the host
performs when a condition represented by the attribute value is met.
C
Cisco Trust Agent
Cisco Trust Agent. The Cisco implementation of the PA.