Cisco ASA Series Cli Configuration Manual page 889

Chapter 1 Configuring the Identity Firewall
Supported Windows servers include Windows 2003, Windows 2008, and Windows 2008 R2.
Note
For the steps to install and configure the AD Agent, see the Installation and Setup Guide for the Active
Directory Agent.
Before configuring the AD Agent in the ASA, obtain the secret key value that the AD Agent and the ASA
use to communicate. This value must match on both the AD Agent and the ASA.
Microsoft Active Directory
Microsoft Active Directory must be installed on a Windows server and accessible by the ASA. Supported
versions include Windows 2003, 2008, and 2008 R2 servers.
Before configuring the Active Directory server on the ASA, create a user account in Active Directory
for the ASA.
Additionally, the ASA sends encrypted log in information to the Active Directory server by using SSL
enabled over LDAP. SSL must be enabled on the Active Directory server. See the documentation for
Microsft Active Diretory for the steps to enable SSL for Active Directory.
Note
Before running the AD Agent Installer, you must install the following patches on every Microsoft Active
Directory server that the AD Agent monitors. These patches are required even when the AD Agent is
installed directly on the domain controller server. See the README First for the Cisco Active Directory
Agent.
Configuring the Identity Firewall
This section contains the following topics:
•
•
•
•
•
•
Task Flow for Configuring the Identity Firewall
To configure the Identity Firewall, perform the following tasks:
Step 1
Configure the Active Directory domain in the ASA.
See
See also
servers to meet your environment requirements.
Step 2
Configure the AD Agent in ASA.
Windows 2003 R2 is not supported for the AD Agent server.
Task Flow for Configuring the Identity Firewall, page 1-9
Configuring the Active Directory Domain, page 1-10
Configuring Active Directory Agents, page 1-12
Configuring Identity Options, page 1-13
Configuring Identity-Based Security Policy, page 1-18
Collecting User Statistics, page 1-21
Configuring the Active Directory Domain, page
Deployment Scenarios, page 1-4
1-10.
for the ways in which you can deploy the Active Directory
Cisco ASA Series CLI Configuration Guide
Configuring the Identity Firewall
1-9