Cisco PIX 500 Series Configuration Manual page 1078

Configuring an External RADIUS Server
Table E-5 Security Appliance Supported RADIUS Attributes and Values (continued)
Attribute Name
Required-Client- Firewall-Vendor-Code
Required-Client-Firewall-Product-Code
Required-Client-Firewall-Description
Require-HW-Client-Auth
Required-Individual-User-Auth
Authenticated-User-Idle-Timeout
Cisco-IP-Phone-Bypass
IPSec-Split-Tunneling-Policy
Cisco Security Appliance Command Line Configuration Guide
E-28
Appendix E Configuring an External Server for Authorization and Authentication
VPN Attr.
3000 ASA PIX #
Y Y Y
45
Y Y Y
46
Y Y Y
47
Y Y Y
48
Y Y Y
49
Y Y Y
50
Y Y Y
51
Y Y Y
55
Single
or
Syntax/ Multi-
Type Valued Description or Value
Single
Integer 1 = Cisco Systems (with Cisco
Integrated Client)
2 = Zone Labs
3 = NetworkICE
4 = Sygate
5 = Cisco Systems (with Cisco
Intrusion Prevention Security
Agent)
Single
Integer Cisco Systems Products:
1 = Cisco Intrusion
Prevention Security Agent
or Cisco Integrated Client
(CIC)
Zone Labs Products:
1 = Zone Alarm
2 = Zone AlarmPro
3 = Zone Labs Integrity
NetworkICE Product:
1 = BlackIce
Defender/Agent
Sygate Products:
1 = Personal Firewall
2 = Personal Firewall Pro
3 = Security Agent
Single
String String
Single
Boolean 0 = Disabled
1 = Enabled
Single
Integer 0 = Disabled
1 = Enabled
Single
Integer 1-35791394 minutes
Single
Integer 0 = Disabled
1 = Enabled
Single
Integer 0 = No split tunneling
1 = Split tunneling
2 = Local LAN permitted
OL-12172-03