Building off of my previous post on using locally defined ACLs for access with proxy auth I wanted to cover downloadable ACLs. Downloadable ACLs are only available using RADIUS for authentication. They give you the ability to do per user or per group access-control while defining and maintaining the access-lists on the ACS server. This [...]

Using RADIUS for proxy auth is a bit different than using TACACs. They can both authorize valid traffic through the firewall but the implmentation is done in very different ways on both the RADIUS server and the TACACs server. This is also partly due to the ways the protocols are designed. With RADIUS you have [...]

Joe and I didn’t get to go to Networkers this time (I still haven’t been!), but Brian and Brian from Internetwork Expert are there and they are liveblogging various talks at the event.  Most notably for you readers, Brian McGahan reports that changes are coming to the CCIE Security Lab Exam!  Here are a few [...]