User Guide for Cisco Secure Access Control Server - Stewing Home

Managing NAPs
Cloning a Profile
14-6
Cloning replicates all the following relevant components for a NAP:
Protocol references—Password protocols.
Authentication references—External databases.
User Guide for Cisco Secure Access Control Server 4.2
Chapter 14 Network Access Profiles
Posture references—Internal or external posture validation, and external audit server. For more
information about posture references, see Setting Up Posture Validation Policies, page 13-16.
Authorization references—RACs and DACLs.
Cloning a NAP does not copy the shared-profile components, or the internal and external
posture-validation policies, that the profile references. The newly cloned profile references the same
shared-profile components as the original profile. For example, components that are referenced by name
(RACs, DACLs, NAFs) remain the same.
When you clone a NAP, it is initially inactive by default. This inactive state avoids ambiguity when ACS
tries to match an access request to a profile. After you modify the cloned profile, you can change the
status to the active state.
The Profile description, Active Flag, Protocol Selection, Advanced Filter, Authentication, and
Authorization policies are all cloned (copied). Posture-validation policies (Internal/External/Audit
Servers) are not copied, but are referenced by the newly created Profile.
The naming pattern for cloning is Copy-of-. For multiple cloning (cloning the cloned element) the prefix
Copy-(2)-of- is given.
If the new name length exceeds 32 characters, it is truncated to 32 characters.
To clone a profile:
Step 1 In the navigation bar, click Network Access Profiles.
The Network Access Profiles page appears.
Step 2 Click the name of the profile you want to clone.
The Profile Setup page appears.
Step 3 Click Clone.
A copy of the cloned profile appears in the Network Access Profiles page.
Step 4 (Optional) Modify the cloned profile. For information about editing profiles, see Editing a Profile,
page 14-5.
Step 5 Click Apply and Restart for your changes to take effect.
Deleting a Profile
To delete a profile:
Step 1 In the navigation bar, click Network Access Profiles.
The Network Access Profiles page appears.
Step 2 Click the Name.
OL-14386-02