Differentiation of ACS for Windows and ACS Solution Engine

[snakayama]

Hi everyone,

I have a question about the differentiation of ACS for Windows and

ACS Solution Engine.

Software version of each is;

ACS for Windows 4.0

ACS Solution Engine 4.1.1 build 23

and I access ACS Solution Engine via WEB console (http access).

- Differentiation One:

On the ACS for Windows, I can configure the setting of log file in

"Log File Management", such as,

Every day

Every week

Every month

When size is greater than xxxx

But on the ACS Solution Engine 23, the "Log File Management"

is not displayed.

So I can not configure the log setting which can configure on ACS for Windows.

- Differentiation Two:

On the ACS for Windows, the log information of "Network Access Restrictions

(NAR)" is displayed under "Network Access Restrictions (NAR)" field.

But on the ACS Solution Engine 23, the log information of

"Network Access Restrictions (NAR)" is not displayed under

"Network Access Restrictions (NAR)" field.

- Differentiation Three

On the ACS for Windows, the log information of "TACACS+ Administration"

is displayed under "TACACS+ Administration" field.

But on the ACS Solution Engine 23, the log information of

"TACACS+ Administration" is not displayed under "TACACS+ Administration"

field.

Summary of above is as follows

Log File Management

ACS for Windows Displayed(Exist)

ACS Solution Engine Not Displayed(Not Exit)

Network Access Restrictions Log

ACS for Windows Displayed

ACS Solution Engine Not Displayed

TACACS+ Administration Log

ACS for Windows Displayed

ACS Solution Engine Not Displayed

I think this differentiation is normal behavior and if I get ACS Solution

Engine displayed same parameters and log information, I should use ACS

Remote Agent and I should access ACS Solution Engine via Remote Agent not

WEB console.

Is my understanding correct ?

If fact, this question is given me from my customer, however I have only

ACS Solution Engine 3.3 and not have 4.1 in my lab and ACS Solution

Engine 3.3 does not support Remote Agent.

So I can not confirm whether Remote Agent is the resolution or not of this

question.

Your information would be greatly appreciated.

Best regards,

[b.speltz]

Following document may help you

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_guide_book09186a0080721d25.html

[darpotter]

There are in fact very few differences between SW and appliance versions of ACS wrt functionality.

Mostly they are restricted to the non-availability of things that require 3rd party dlls (eg ODBC, RSA)

All of the points listed above look like issues with features not being enabled under the Interface Settings.

We did just notice that 4.1 renamed a whole load of logging attributes (GRRR) so anyone with scripts built around their CSV logs might need to do some rework after a 4.1 upgrade.

[darpotter]

addendum... the appliance does have hard coded log/directory management - set to 10MB rollover.