Content

| 9.7 |  | Authentication, Authorization, and Accounting |
| 9.7.4 |  | Cisco Secure Access Control Server (ACS) |

The Cisco Secure Access Control Server (ACS) is specialized security software that runs on Windows 2000. Earlier versions of ACS (previous to ACS 3.1) ran on Windows NT and Unix. The software simplifies and centralizes control of access control and accounting for dialup access servers, virtual private networks (VPNs) and firewalls, voice-over-IP (VoIP) solutions, broadband access, content networks, and wireless networks. Cisco ACS employs a web-based graphical interface, and can distribute the AAA information to hundreds or even thousands of access points in a network.

The Cisco Secure ACS software uses either the TACACS+ or the RADIUS protocol to provide network security and tracking.

Each network device can be configured to communicate with ACS. Service providers can use ACS to centralize control of dial-up access. With a CiscoSecure ACS, system administrators may use a variety of authentication methods that are aligned with a varying degree of authorization privileges. Centralizing control of network access simplifies access management and helps establish consistent provisioning and security policies. For example, ACS can automatically disable accounts to prevent brute force password-guessing attacks.

Cisco Secure ACS also acts as a central repository for accounting information. Each user session that is granted by the ACS can be fully accounted for and stored in the server. This accounting information can be used for billing, capacity planning, and security audits.

The Web-based interface can be used to log in to the Cisco Secure ACS database and easily create user or group accounts, set passwords, or configure access controls.