Configuring a Cisco Access Control Server (ACS)

Firmware: 3.x

CollectorA TLC module that gathers or receives log messages from Log Sources.: File CollectorA type of Collector that gathers log messages from Log Sources that store messages in an ASCII log file.

To configure a Cisco Access Control Server (ACS) to send log messages to TLC, install Cisco Secure ACS Remote AgentA service that may be installed on a Windows or Linux system to collect log messages from any log-generating application running on the system. When installed on a Windows system, the Agent can also collect the system's Windows Event Logs via the Secure Socket Layer (SSL) protocol. on the host that will store the log files. By default, the Agent software is installed in the following locations.

Windows: C:\Program Files\Cisco\CiscoSecure ACS Agent

Solaris: /opt/CSCOacsag

When you configure the AssetAn object in TLC that represents a Log Source from which TLC collects log messages directly. for the Log SourceAny log-generating application, operating-system service, database instance, or device from which TLC collects log messages. (see Step 6. Configure your Assets), you should add the log files in the following directories on the host in the File CollectionThe gathering or receipt of log messages from Log Sources. tab of the Asset's properties dialog (see Table 48):

AdminAudit

Backup and Restore

DbSync

Failed Attempts

Passed Authentications

RADIUS Accounting

Service Monitoring

TACACS+ Accounting

TACACS+ Administration

VoIP Accounting