Chapter 5 Setting Up And Managing Shared Profile Components; About Shared Profile Components - Cisco 2509 - Router - EN User Manual

About Shared Profile Components

78-14696-01, Version 3.1
Setting Up and Managing Shared
Profile Components
This chapter addresses the Cisco Secure Access Control Server
(Cisco Secure ACS) for Windows Server version 3.1 features found in the Shared
Profile Components section of the HTML interface. It contains the following
sections:
About Shared Profile Components, page 5-1
•
Downloadable PIX ACLs, page 5-2
•
• Network Access Restrictions, page 5-6
Command Authorization Sets, page 5-13
•
The Shared Profile Components section enables you to develop and name
reusable, shared sets of authorization components which may be applied to one or
more users or groups of users and referenced by name within their profiles. These
include network access restrictions (NARs), command authorization sets, and
downloadable PIX ACLs.
The Shared Profile Components section of Cisco Secure ACS addresses the
scalability of selective authorization. Shared profile components can be
configured once and then applied to many users or groups. Without this ability,
flexible and comprehensive authorization could only be accomplished by
explicitly configuring the authorization of each user group for each possible
C H A P T E R
User Guide for Cisco Secure ACS for Windows Server
5
5-1