Cisco CSACSE-1111-K9 - Secure Access Control Server Solution Engine Installation Manual page 105

Windows Service Advisement
The operating system for the Cisco Secure ACS Solution Engine (ACS SE) is a customized and
minimized version of the Windows 2000 operating system. The ACS SE removes all extraneous services,
blocks all unused ports, and otherwise prevents all other access to the ACS server system, thereby
dramatically increasing the security posture of ACS.
The following sections present details regarding the minimization of the operating system's services:
•
•
Services That are Run
Table B-1
Table B-1
Service Name
COM+ Event System
DHCP Client
DNS Client
Event Log
IPSEC Policy Agent
License Logging Service
Logical Disk Manager
Network Connections
Plug and Play
OL-9969-03
Services That are Run, page B-1
Services That Are Not Run, page B-2
lists the services that are run on the ACS SE.
Operating System Services Automatically Run by ACS SE
A P P E N D I X
Description
Provides automatic distribution of events to subscribing COM
components.
Manages network configuration by registering and updating IP
addresses and DNS names.
Resolves and caches Domain Name System (DNS) names.
Logs event messages issued by programs and Windows. Event Log
reports contain information that can be useful in diagnosing
problems. Reports are viewed in Event Viewer.
Manages IP security policy and starts the ISAKMP/Oakley (IKE)
and the IP security driver.
Tracks Client Access License usage for a server product.
Performs the Logical Disk Manager Watchdog Service.
Manages objects in the Network and Dial-Up Connections folder, in
which you can view local area network and remote connections.
Manages device installation and configuration and notifies
programs of device changes.
Installation Guide for Cisco Secure ACS Solution Engine 4.1
B
B-1