topic Authentication for a particular ACL in Network Access Control

Authentication for a particular ACL

mohsin.khan — Mon, 11 Mar 2019 01:17:44 GMT

Hi,

I am trying to implement Authentication for a particular ACL on the ASA, i.e. whenever that particular ACL is matched, the ASA will authenticate the user with either local database or AAA server.

I have seen the document "Configuring AAA for cut-through proxy", but that says it works only for http, https and ftp etc, whereas in my case i m looking to authenticate the users trying to access my sql server, for which i need to match a particular ACL.

regards,

Mohsin

Authentication for a particular ACL

Tarik Admani — Wed, 10 Aug 2011 11:09:08 GMT

Mohsin,

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/access_fwaaa.html#wp1063502

You will have to setup a virtual http, ftp portal so that when users hit the ACL setup for cut-through proxy for the sql ports, that they will have to fire up a telnet, ftp or http session, enter their credentials and then will be permitted access to the sql server.

Give this a shot and let us know if there is anything else that you need help with.

thanks,

Tarik