I don't know about Express but the Solution Engine (also an appliance):
Q. How does Cisco Secure ACS Solution Engine authenticate to Windows domains?
A. In general, in order to authenticate Windows NT 4.0 or Active Directory domain users, you must establish a Windows member or domain controller trust relationship. Since Cisco Secure ACS Solution Engine does not run the necessary Windows server services to establish this trust, an external Cisco Secure ACS remote agent is provided with the appliance solution. The Cisco Secure ACS remote agent can be installed on member servers, domain controllers, or backup domain controllers. Note: The best practice would be to install the remote agent on a full domain controller-this would allow it to perform its authentication functions with the least extra configuration requirements.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...