G-7
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Appendix G Cisco Secure ACS Internal Architecture
CSMon
Notification
CSMon can be configured to notify system administrators in the following cases:
•
Exception events
•
Response
•
Outcome of the response
Notification for exception events and outcomes includes the current state of
Cisco Secure ACS at the time of the message. The default notification method is
simple mail-transfer protocol (SMTP) e-mail, but you can create scripts to enable
other methods.
Response
CSMon detects exception events that affect the integrity of the service. For
information about monitored events, see
Monitoring, page G-5
. These events are
application-specific and hard-coded into Cisco Secure ACS. There are two types
of responses:
•
Warning events—Service is maintained but some monitored threshold is
breached.
•
Failure events—One or more Cisco Secure ACS components stop providing
service.
CSMon responds to the event by logging the event, sending notifications (if
configured) and, if the event is a failure, taking action. There are two types of
actions:
•
Predefined actions—These actions are hard-coded into the program and are
always carried out when a triggering event is detected. Because these actions
are hard-coded, they are integral to the application and do not need to be
configured. These actions include running the CSSupport utility, which
captures most of the parameters dealing with the state of the system at the
time of the event.
