Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ACS 1113 SE - Windows updates

hi ,

Does cisco provides updates for underlying windows server in ACS SE 1113 ? Patch updates are available for ACS 4.2 , but how can we update underlying windows server , Does patches for ACS is enough to secure underlying windows server .

Everyone's tags (1)
2 ACCEPTED SOLUTIONS

Accepted Solutions

ACS 1113 SE - Windows updates

Hi,

the ACS appliances has the option of running the CSA agent which provide a layer of security. The windows updates are done through the patches and are usually included in one of the two step patch/upgrade processes. However it isnt clearly documented as to which upgrades are completed during the upgrade. If you need this documentation please open a tac case and an engineer should be able to provide that for you.

Thanks,

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*

ACS 1113 SE - Windows updates

Kamal,

It would be best if you opened a TAC case, in order to get some answers. The ACS 1113 SE is a hardened appliance where remote desktop and other features are locked down and this unit can be only administered through console, or the ACS web. If there is a critical microsoft fix that needs to be applied to this unit, it is usually done through one of the patch releases. If Cisco allowed dynamic windows updates and if there was a hotfix that broke functionality within one of the ACS dll files then it would be a nightmare for cisco to be able to support all the devices immediatly after one of the MS fixes were published.

Here is a guide that states which services are running and which are disabled on the solution engine - http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/solution_engine/servscop.html

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*
4 REPLIES

ACS 1113 SE - Windows updates

Hi,

the ACS appliances has the option of running the CSA agent which provide a layer of security. The windows updates are done through the patches and are usually included in one of the two step patch/upgrade processes. However it isnt clearly documented as to which upgrades are completed during the upgrade. If you need this documentation please open a tac case and an engineer should be able to provide that for you.

Thanks,

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*
New Member

ACS 1113 SE - Windows updates

Hi

Tarik Admani ,

Thanks a lot for the info . So it is sure that Windows patches are covered in Patches provided for ACS , because Auto update process in Windows for ACS is disabled by default , SO in no way the appliance can update itself from Microsoft update server . It would be great if you can provide additional info .

Thanks .

ACS 1113 SE - Windows updates

Kamal,

It would be best if you opened a TAC case, in order to get some answers. The ACS 1113 SE is a hardened appliance where remote desktop and other features are locked down and this unit can be only administered through console, or the ACS web. If there is a critical microsoft fix that needs to be applied to this unit, it is usually done through one of the patch releases. If Cisco allowed dynamic windows updates and if there was a hotfix that broke functionality within one of the ACS dll files then it would be a nightmare for cisco to be able to support all the devices immediatly after one of the MS fixes were published.

Here is a guide that states which services are running and which are disabled on the solution engine - http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/solution_engine/servscop.html

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*
New Member

ACS 1113 SE - Windows updates

Hi Tarik,

Thanks a lot .

401
Views
0
Helpful
4
Replies
CreatePlease login to create content