Cisco Secure ACS is by the far the worlds best selling and most featured AAA Server offering support for both device administration (via TACACS+) and network service security (via RADIUS). For each of the various functions ACS performs it writes event data into a set of different CSV reports, for example passed/failed authentication, RADIUS/TACACS+ session accounting, TACACS+ command accounting, ACS Admin audit and so on.

The challenge is how to get all this information into aaa-reports! so that you can start "crunching" it! Luckily there are various options ranging from simple file copy, ftp, Cisco ACS Remote Log Agent through to our own csvsync http client. csvsync is unique in that it polls the ACS servers at a specified interval and downloads only new CSV files in bulk - resulting in very efficient use of your network.

aaa-reports! interop options with Cisco Secure ACS

In addition to CSV log data, aaa-reports! is able to import the ACS User & Group database (via an ACS support "package.cab" or csutil "dump.txt" file) to report against the ACS configuration such as disabled user accounts, device admin password aging etc. Ideal if you need to provide audit documentation about your AAA policy.