Cisco ASA Series User Manual

1-9
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the Identity Firewall
Configuring the Identity Firewall
Supported Windows servers include Windows 2003, Windows 2008, and Windows 2008 R2.
Note Windows 2003 R2 is not supported for the AD Agent server.
For the steps to install and configure the AD Agent, see the Installation and Setup Guide for the Active
Directory Agent.
Before configuring the AD Agent in the ASA, obtain the secret key value that the AD Agent and the ASA
use to communicate. This value must match on both the AD Agent and the ASA.
Microsoft Active Directory
Microsoft Active Directory must be installed on a Windows server and accessible by the ASA. Supported
versions include Windows 2003, 2008, and 2008 R2 servers.
Before configuring the Active Directory server on the ASA, create a user account in Active Directory
for the ASA.
Additionally, the ASA sends encrypted log in information to the Active Directory server by using SSL
enabled over LDAP. SSL must be enabled on the Active Directory server. See the documentation for
Microsft Active Diretory for the steps to enable SSL for Active Directory.
Note Before running the AD Agent Installer, you must install the following patches on every Microsoft Active
Directory server that the AD Agent monitors. These patches are required even when the AD Agent is
installed directly on the domain controller server. See the README First for the Cisco Active Directory
Agent.
Configuring the Identity Firewall
This section contains the following topics:
• Task Flow for Configuring the Identity Firewall, page 1-9
• Configuring the Active Directory Domain, page 1-10
• Configuring Active Directory Agents, page 1-12
• Configuring Identity Options, page 1-13
• Configuring Identity-Based Security Policy, page 1-18
• Collecting User Statistics, page 1-21
Task Flow for Configuring the Identity Firewall
To configure the Identity Firewall, perform the following tasks:
Step 1 Configure the Active Directory domain in the ASA.
See Configuring the Active Directory Domain, page 1-10.
See also Deployment Scenarios, page 1-4 for the ways in which you can deploy the Active Directory
servers to meet your environment requirements.
Step 2 Configure the AD Agent in ASA.

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English