config commands authorization on ASA

r.spiandorello — Sun, 10 Mar 2019 22:55:37 GMT

Hi, is there a way to control the config commands with tacacs+ authorization ?

When I enable the configure command, in ACS shell coomand authorization set, all other config commands are enabled.

In IOS there's the "aaa authorization config-commands", how to with ASA ?

Re: config commands authorization on ASA

Jagdeep Gambhir — Tue, 24 Jun 2008 15:09:07 GMT

Please check this link that explains about command authorization on ASA.

these commands are required on ASA/PIX/FWSM in order to implement command authorization through an ACS server:

aaa-server authserver protocol tacacs+

aaa-server authserver host 10.1.1.1

aaa authorization command authserver

Regards,

~JG

Do rate helpful posts