I am running a Windows box with ACS 4.1 on it and I have all my routers and switches authentication to it. Recently I was assigned a task to set up a service that would log commands that are input into my devices. Is it possible for the ACS to record that information?
If you've been asked to audit the commands being executed on your network devices you might like to know that extraxi aaa-reports! has been built purposely to import ACS logs from multiple ACSs (with mixed versions) to support you in creating management summary reports including graphs, charts, top N users/cmds/groups etc and also detailed activity, security and exception reports.
We've also got a point 'n' click query builder that allows you to create ad-hoc custom reports for forensic analysis plus a web-reporting tool to allow basic filtering and tabular reports with PDF/XLS/CSV export.
Further, you can import the ACS pacakge.cab exported database to create reports like:
Which groups have access to AAA Client XYZ
What commands can a group execute on each AAA Client
Our csvsync log collection client will connect directly to each ACS and pull down new logs (in bulk) and can also request the ACS export its database too. aaa-reports! can then be scheduled to import the new logs and run off report batches - you get the fully graphical report PDFs emailed direct to your inbox.
Take a look at http://www.extraxi.com/aaare.htm for a complete rundown of features. There's a link for our 60 day eval version too. We also offer personalised online meetings to help potential customers get the software fully configured so you get the most out of the trial.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...