Cisco Acs 5x User Guide

12-23
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
Related Topics
Creating, Editing, and Duplicating Alarm Thresholds, page 12-11
Configuring General Threshold Information, page 12-13
Configuring Threshold Notifications, page 12-32
ACS Process Status
When ACS evaluates this threshold, it examines the accounting records that it received during the 
interval between the previous and current alarm...

12-24
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
Related Topics
Creating, Editing, and Duplicating Alarm Thresholds, page 12-11
Configuring General Threshold Information, page 12-13
Configuring Threshold Notifications, page 12-32
ACS System Health
When ACS evaluates this threshold, it examines whether any system health parameters have exceeded 
the specified threshold in the specified time...

12-25
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
Related Topics
Creating, Editing, and Duplicating Alarm Thresholds, page 12-11
Configuring General Threshold Information, page 12-13
Configuring Threshold Notifications, page 12-32
ACS AAA Health
When ACS evaluates this threshold, it examines whether any ACS health parameters have exceeded the 
specified threshold in the specified time interval up...

12-26
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
Related Topics
Creating, Editing, and Duplicating Alarm Thresholds, page 12-11
Configuring General Threshold Information, page 12-13
Configuring Threshold Notifications, page 12-32
RADIUS Sessions
When ACS evaluates this threshold, it determines whether any authenticated RADIUS sessions have 
occurred in the past 15 minutes where an accounting start...

12-27
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
Unknown NAD
When ACS evaluates this threshold, it examines the RADIUS or TACACS+ failed authentications that 
have occurred during the specified time interval up to the previous 24 hours. From these failed 
authentications, ACS identifies those with the failure reason Unknown NAD. 
The unknown network access device (NAD) authentication records are...

12-28
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
Related Topics
Creating, Editing, and Duplicating Alarm Thresholds, page 12-11
Configuring General Threshold Information, page 12-13
Configuring Threshold Notifications, page 12-32
External DB Unavailable
When ACS evaluates this threshold, it examines the RADIUS or TACACS+ failed authentications that 
have occurred during the specified interval up...

12-29
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
You can specify one or more filters to limit the failed authentications that are considered for threshold 
evaluation. Each filter is associated with a particular attribute in the records and only those records that 
match the filter condition are counted. If you specify multiple filter values, only the records that match 
all the filter conditions...

12-30
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
If, in the past four hours, RBACL drops have occurred for two different source group tags as shown in 
the following table, an alarm is triggered, because at least one SGT has a count greater than 10.
You can specify one or more filters to limit the RBACL drop records that are considered for threshold 
evaluation. Each filter is associated with a...

12-31
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
NAD-Reported AAA Downtime
When ACS evaluates this threshold, it examines the NAD-reported AAA down events that occurred 
during the specified interval up to the previous 24 hours. The AAA down records are grouped by a 
particular common attribute, such as device IP address or device group, and a count of records within 
each of those groups is...

12-32
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12      Managing Alarms
  Creating, Editing, and Duplicating Alarm Thresholds
Related Topics
Creating, Editing, and Duplicating Alarm Thresholds, page 12-11
Configuring General Threshold Information, page 12-13
Configuring Threshold Notifications, page 12-32
Configuring Threshold Notifications 
Use this page to configure alarm threshold notifications.
Step 1Select Monitoring and Reports > Alarms > Thresholds, then do one of...