User Guide for Cisco Secure Access Control Server - Stewing Home

Configuring Policies
13-24
User Guide for Cisco Secure Access Control Server 4.2
Chapter 13 Posture Validation
For descriptions of the options available on the External Policy Configuration page, see Configuring
Policies, page 13-15.
You can also set up an external AAA server that is used to evaluate SoHs from networks that include
Microsoft Vista clients (NAC/NAP networks).
To set up an external posture validation server:
Step 1 After you choose External Posture Validation Setup, the External Posture Validation Servers page
displays.
Step 2 Under the External Posture AAA Servers table, click Add Server.
The Add/Edit External Posture AAA Server page appears.
Step 3 Name the server and provide a description if necessary.
Step 4 Provide addressing information for the primary and secondary servers:
a. Check the Primary Server configuration check box.
Note If you do not choose the Primary Server Configuration check box, ACS uses the secondary
server configuration. If no secondary server configuration exists or the secondary server is
unreachable, ACS rejects the posture validation request.
b. Provide configuration details about the primary external AAA server. For more information about
the boxes and list in this area, see Configuring Policies, page 13-15.
Step 5 (Optional) In the Secondary Server configuration pane:
a. Check the Secondary Server configuration check box
b. Enter configuration details about the secondary external AAA server. For more information about
the boxes and list in this area, see Configuring Policies, page 13-15.
Step 6 Determine the forwarding attributes to send to the primary or secondary external server by moving the
available forwarding attributes to the chosen forwarding attributes column.
Step 7 Click Submit to save your changes.
Step 8 Click Apply and Restart to submit your changes to ACS.
Editing an External Posture AAA Server
You can edit an external posture AAA server by accessing it through the Posture Validation pages.
To edit an external posture validation server:
Step 1 In the navigation bar, click Posture Validation.
Step 2 Click External Posture Validation Setup.
Step 3 Click the server name that you want to edit.
The Add/Edit External Posture AAA Server page appears.
Step 4 Edit the fields and click Submit.
OL-14386-02