Hi,
The latest version of ACS (4.1) has new features specifically designed to address SOX issues:
"This release contains new ACS administrator permissions to improve password management and audit reports for regulatory compliance; for example, Sarbanes-Oxley (SOX). ACS includes the following capabilities for:"
Authentication:
* Forcing periodic change of administrator?s password.
* Applying password structure policy.
* Forcing administrator's password change for inactive account.
* Preventing the reuse of old password (password history).
* Disabling administrator accounts for inactivity.
* Disabling administrator accounts after failed logins.
* Allowing ACS administrators to change their own passwords.
Audit and Reporting:
* Logging all administrative actions via system logging (syslog), in addition to existing logging targets.
* Controlling administrators? access to log file configuration to prevent specific audit logging from being disabled.
* Adding new reports for administrators privileges.
Authorization:
* Providing a read-only privilege for users and groups.
HTH - plz rate if useful.
Andrew.
