Audit Policy - Cisco 2509 - Router - EN User Manual

Audit Policy

Step 5
Step 6
Step 7
Audit Policy
User Guide for Cisco Secure ACS for Windows Server
10-18
Set the invalid IP address response policy:
To configure Cisco Secure ACS to respond with a message when an
a.
administrative session is requested from an invalid IP address, select the
Respond to invalid IP address connections check box.
b. To configure Cisco Secure ACS to send no message when an administrative
session is requested from an invalid IP address, clear the Respond to invalid
IP address connections check box.
Set the failed administrative login attempts policy:
To enable Cisco Secure ACS to lock out an administrator after a specified
a.
number of successive failed administrative login attempts, select the Lock
out Administrator after X successive failed attempts check box.
b. In the X box, type how many successive failed login attempts can occur before
Cisco Secure ACS locks out an administrator.
Note If the Lock out Administrator after X successive failed attempts check
box is selected, the X box cannot be set to zero and cannot exceed 4
characters.
Click Submit.
Result: Cisco Secure ACS saves and begins enforcing the session policy settings
you made.
The Audit Policy feature controls the generation of the Administrative Audit log.
For more information about enabling, viewing, or configuring the Administrative
Audit log, see Cisco Secure ACS System Logs, page
Chapter 10 Setting Up and Managing Administrators and Policy
9-11.
78-14696-01, Version 3.1