ACS with Windows active directory through PIX

patrick.tuttle · ‎03-22-2006

Hello,

What would be required to have an ACS server in a DMZ talk to the active directory domain that is on the outside of the fw.

ACS-----(dmz)PIX(outside)---AD Domain

One department owns the DMZ and wants the ACS server to be in the DMZ and the other dept owns the outside network where all the servers and domains are.

Any help would be greatly appreciated.

thanks

Report Inappropriate Content · ‎03-28-2006

I would recommend a copy of the active directory users and groups to be placed inside the network where ACS server is present. This would further speeden up the authentication process. Still why do they need this AD domain on the outside network?.

patrick.tuttle · ‎03-28-2006

Thanks for the reply,

The admin responsible for the DMZ wants the benefits of authentication of the users on the domain that exists on the outside of the FW.

The copy is a good idea, except users are added and delteted frequently.

-pat