topic How to configure ACS 5.2 and Checkoint for firewall admin using in Network Access Control https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990915#M225605 <HTML><HEAD></HEAD><BODY><P>Hi Thomas,</P><P></P><P>Thanks for the reply, but i dont have enough privilege to access the link. will u able to share it?</P></BODY></HTML> Wed, 05 Sep 2012 13:22:40 GMT Marlon Malinao 2012-09-05T13:22:40Z How to configure ACS 5.2 and Checkoint for firewall admin using TACACS https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990911#M225542 <P>Hi,</P><P></P><P>Can somebody show how to configure ACS 5.2 for device administration of Checkpoint firewalls and security management servers?</P><P></P><P></P><P></P><P>thanks</P> Mon, 11 Mar 2019 02:23:27 GMT https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990911#M225542 Marlon Malinao 2019-03-11T02:23:27Z How to configure ACS 5.2 and Checkoint for firewall admin using https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990912#M225552 <HTML><HEAD></HEAD><BODY><P> Hi,</P><P></P><P>I have created a "Authorization Profile" with a new "Shell Profile" policy.</P><P>In the policy i manualy entered this attributes:</P><P>Nokia-IPSO-SuperUser-Access=1</P><P>Nokia-IPSO-User-Role=adminRole</P><P>"adminRole" is a Checkpoint default role. You can create your own role and change these in your Shell Profile if needed. </P><P>The attribute are set to mandatory for this Shell Profile.</P><P></P><P>Regards</P></BODY></HTML> Mon, 06 Aug 2012 15:20:52 GMT https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990912#M225552 thomas1337 2012-08-06T15:20:52Z How to configure ACS 5.2 and Checkoint for firewall admin using https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990913#M225560 <HTML><HEAD></HEAD><BODY><P>Hi Thomas, </P><P></P><P>Thanks for the reply,&nbsp; this is for firewall gateway running IPSO, but how about the Security management server for checkpoint?</P><P></P><P></P><P>regards,</P><P>Marlon</P></BODY></HTML> Mon, 06 Aug 2012 15:48:58 GMT https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990913#M225560 Marlon Malinao 2012-08-06T15:48:58Z Re: How to configure ACS 5.2 and Checkoint for firewall admin us https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990914#M225582 <HTML><HEAD></HEAD><BODY><P>Hi Marlon,</P><P></P><P>we use TACACS only to authenticate user against our Security Management Server, but for authorization there is a local user configured which refers to the TACACS user.</P><P>If you use Provider-1, look at page 54.</P><P><A href="http://dl3.checkpoint.com/paid/53/CheckPoint_R65_Provider1_AdminGuide.pdf?HashKey=1344278626_b260a4b6b3969325ae6bb4fc12d66871&amp;xtn=.pdf" rel="nofollow">http://dl3.checkpoint.com/paid/53/CheckPoint_R65_Provider1_AdminGuide.pdf?HashKey=1344278626_b260a4b6b3969325ae6bb4fc12d66871&amp;xtn=.pdf</A></P><P></P><P>In Cisco ACS, you configure an "Authorization Profile" and add only the Shell Profile "Permit Access"</P><P></P><P>Thomas</P></BODY></HTML> Mon, 06 Aug 2012 17:20:24 GMT https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990914#M225582 thomas1337 2012-08-06T17:20:24Z How to configure ACS 5.2 and Checkoint for firewall admin using https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990915#M225605 <HTML><HEAD></HEAD><BODY><P>Hi Thomas,</P><P></P><P>Thanks for the reply, but i dont have enough privilege to access the link. will u able to share it?</P></BODY></HTML> Wed, 05 Sep 2012 13:22:40 GMT https://community.cisco.com/t5/network-access-control/how-to-configure-acs-5-2-and-checkoint-for-firewall-admin-using/m-p/1990915#M225605 Marlon Malinao 2012-09-05T13:22:40Z