topic prevent SSL VPN user from accessing ASA cli in Network Access Control

prevent SSL VPN user from accessing ASA cli

raf.vanderveken — Mon, 11 Mar 2019 01:24:46 GMT

Hi ,

I've configured several users on my ASA in it's local database.

Those users are used for ssl vpn login, but the problem that I have is that those users

also have SSH access. Is it possible to prevent this ?

Thanks

Bastien Migette — Mon, 19 Sep 2011 09:23:19 GMT

Hello Raf,

If you do something like this:

username xxx attributes

service-type remote-access

the user shouldn't get CLI access anymore.

Regards,

Bastien

raf.vanderveken — Mon, 19 Sep 2011 20:09:49 GMT

Hi bastien,

I already tried that but still the user is able to get CLI access.

grtz

raf

Bastien Migette — Tue, 20 Sep 2011 07:56:58 GMT

Hi Raf,

Please try to add the following command:

aaa authorization exec LOCAL

This should fix your problem.