Cisco 3.3 User Manual page 605

Chapter 14 Network Admission Control
d.
e.
The External Policy Configuration page appears.
In the Name box, type a descriptive name for the policy.
Step 2
In the Description box, type a useful description of the policy.
Step 3
In the Primary Server configuration area, do the following:
Step 4
a.
b.
(Optional) In the Secondary Server configuration area, do the following:
Step 5
a.
b.
Select the posture validation credential types that Cisco Secure ACS should send
Step 6
to the external NAC server.
For each posture validation credential type that you want Cisco Secure ACS to
send to the external NAC server, select the credential type in the Available
Credentials list and click the right arrow (-->).
The credential type appears in the Selected Credentials list.
Tip
Click Submit.
Step 7
78-16592-01
Under Credential Validation Policies, click External Policies.
The Select External Policies page appears.
Click New External Policy.
Select the Primary Server configuration check box.
If you do not select the Primary Server configuration check box,
Note
Cisco Secure ACS uses the secondary server configuration. If no
secondary server configuration exists or if the secondary server is
unreachable, the posture validation request is rejected.
Provide configuration details about the primary NAC server. For more
information about the boxes and list in this area, see
Configuration Options, page
Select the Secondary Server configuration check box
Provide configuration details about the secondary NAC server. For more
information about the boxes and list in this area, see
Configuration Options, page
To remove a credential type from the Selected Credentials list, select it
and click the left arrow (<--).
User Guide for Cisco Secure ACS for Windows Server
14-29.
14-29.
NAC Policies
External Policy
External Policy
14-33