Cisco 500 Series, Configuration Manual

Page: 1078 / 1140

E-28
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Appendix E Configuring an External Server for Authorization and Authentication
Configuring an External RADIUS Server
Required-Client- Firewall-Vendor-Code
Y Y Y
45 Integer
Single
1 = Cisco Systems (with Cisco
Integrated Client)
2 = Zone Labs
3 = NetworkICE
4 = Sygate
5 = Cisco Systems (with Cisco
Intrusion Prevention Security
Agent)
Required-Client-Firewall-Product-Code
Y Y Y
46 Integer
Single
Cisco Systems Products:
1 = Cisco Intrusion
Prevention Security Agent
or Cisco Integrated Client
(CIC)
Zone Labs Products:
1 = Zone Alarm
2 = Zone AlarmPro
3 = Zone Labs Integrity
NetworkICE Product:
1 = BlackIce
Defender/Agent
Sygate Products:
1 = Personal Firewall
2 = Personal Firewall Pro
3 = Security Agent
Required-Client-Firewall-Description
Y Y Y
47 String
Single
String
Require-HW-Client-Auth
Y Y Y
48 Boolean
Single
0 = Disabled
1 = Enabled
Required-Individual-User-Auth
Y Y Y
49 Integer
Single
0 = Disabled
1 = Enabled
Authenticated-User-Idle-Timeout
Y Y Y
50 Integer
Single
1-35791394 minutes
Cisco-IP-Phone-Bypass
Y Y Y
51 Integer
Single
0 = Disabled
1 = Enabled
IPSec-Split-Tunneling-Policy
Y Y Y
55 Integer
Single
0 = No split tunneling
1 = Split tunneling
2 = Local LAN permitted
Table E-5 Security Appliance Supported RADIUS Attributes and Values (continued)
Attribute Name
VPN
3000
ASA PIX
Attr.
# Syntax/
Type
Single
or
Multi-
Valued
Description or Value