Cisco Acs 57 User Guide

55   
Managing Access Policies
Maximum Login Failed Attempts Policy
Maximum Login Failed Attempts Policy
ACS 5.7 allows the administrator to disable the user accounts after n successive failed attempts. You can configure the 
maximum login failed attempts count from ACS web interface. This feature is applicable only for internal users. You can 
configure this feature at user level, identity group level, and globally. ACS 5.7 introduces the maximum login failed 
attempt count configuration at user level...

56
Managing Access Policies
 
Maximum Login Failed Attempts Policy
This section describes the following:
Configuring Maximum Login Failed Attempts Count for Users, page 56.
Configuring Maximum Login Failed Attempts Count for Identity Groups, page 56.
Configuring Maximum Login Failed Attempts Count for Users Globally, page 56
Configuring Maximum Login Failed Attempts Count for Users
To configure maximum login failed attempt count for internal users:
1.Choose Users and Identity Stores > Internal...

57   
Managing Access Policies
Maximum Login Failed Attempts Policy
The User Authentication Settings page appears with the Advanced tab.
2.Check the Disable account if check box. 
3.Check the Failed Attempts Exceed check box and enter the maximum login failed attempts count in the text box 
provided.
4.Click Submit.
The maximum login failed attempt count for internal users is configured globally.
Note: If the authentication points of the primary and secondary instances are in different geographical...

58
Managing Access Policies
 
Maximum Login Failed Attempts Policy 

1
Cisco Systems, Inc.www.cisco.com
 
Monitoring and Reporting in ACS
The Monitoring and Reports drawer appears in the primary web interface window and contains the Launch Monitoring 
and Report Viewer option.
The Monitoring and Report Viewer provides monitoring, reporting, and troubleshooting capabilities for the ACS servers 
in your network. You can extract consolidated log, configuration, and diagnostic data from one or more ACS servers for 
advanced reporting and troubleshooting purposes.
You can...

2
Monitoring and Reporting in ACS
 
Authentication Records and Details
—Alarms
—Dashboard lookup
—Failure reason text
Note: In Monitoring and Reports drawer pages, you can use the page area’s down arrow (v) to hide an area’s content, 
and the right arrow (>) to show its content.
Related Topic
Authentication Records and Details, page 2
Authentication Records and Details
A primary source of information for reports are the authentication records. Reports are provided that analyze these 
records according...

3   
Monitoring and Reporting in ACS
Dashboard Pages
—NAD Show Command—You can run any show command on any NAD device from this pane. To run a NAD show 
command, you must:
a.Enter either the IPv4 or IPv6 IP address of the NAD (Required).
b.Enter the username and password for the NAD.
c.Choose the protocol, Telnet or SSHv2 (Required).
d.Enter the port number. The default is 23 (Required).
e.Enter the enable password.
f.Check the Use Console Server check box if you want to use the console server.
g.Enter...

4
Monitoring and Reporting in ACS
 
Working with Portlets
You can configure the tabs in the Dashboard to suit your needs. See Configuring Tabs in the Dashboard, page 5 for more 
information on how to configure tabs in the Dashboard and add applications to the tabs.
Related Topics
Working with Portlets, page 4
Configuring Tabs in the Dashboard, page 5
Adding Applications to Tabs, page 6
Working with Portlets
A portlet is a small, self-contained window within a dashboard that displays information in the...

5   
Monitoring and Reporting in ACS
Configuring Tabs in the Dashboard
Username/MAC Address—(Required for summary reports) Username of the user or the MAC address in 
aa-bb-cc-dd-ee-ff format. The Monitoring and Report Viewer does not accept MAC address in any other format.
View—Choose Authentication to run an authentication report or Summary for a summary report.
Time Range—Depending on the View option that you choose, the Time Range drop-down list is populated. Choose 
the time range for which you...

6
Monitoring and Reporting in ACS
 
Configuring Tabs in the Dashboard
The Dashboard page appears.
2.Click the Configure drop-down list at the upper-right corner of the Dashboard page.
3.Click Add New Page.
Enter the name of the tab that you want to create in the Add New Page text box.
4.Click Add Page.
A new tab of your choice is created. You can add the applications that you most frequently monitor in this tab
Adding Applications to Tabs
To add an application to a tab:
1.From the Monitoring and Report...