ACS does not include any non-Cisco attributes by default. Therefore, you must import a NAC Attribute Definition File (ADF) from each vendor application that you would like to validate in your NAC posture-validation policies. The attributes that are added can be used to create conditions for internal policies.
NAC introduces the ability to authorize network hosts not only based upon user or machine identity; but also upon a host's posture validation. The posture validation is determined by comparing the host's credentials to a posture-validation policy which you create from attribute-value pairs (AVPs), which are defined by Cisco and other vendors who are NAC partners. Since the range of NAC attributes extends across many vendors and applications, you must import the non-Cisco attributes.
To import a NAC attribute definition file:
Obtain one or more ADFs for the NAC-compatible applications that you want to validate with ACS.
Place the ADFs in the same directory as the ACS utility, CSUtil.exe , or a directory that is accessible by CSUtil.exe.
On the host that is running ACS, open a cmd command prompt and navigate to the directory that contains CSUtil.exe.
Add the AVPs to ACS by using the command:
CSUtil.exe -addAVP filename.adf
After successfully adding the AVPs, restart CSAdmin, CSLog, and CSAuth.
