topic Re: automatic jump to privilege level 15 in PIX/ASA in Network Access Control

automatic jump to privilege level 15 in PIX/ASA

r.spiandorello — Sun, 10 Mar 2019 21:48:43 GMT

Hi, with IOS router and switch I'm able to authorize the user to jump automatically to the correct privilege level in login phase, as configured in authorization privilege field in ACS.

With PIX/ASA the jump does not run: why ?

thank you in advance

Re: automatic jump to privilege level 15 in PIX/ASA

Collin Clark — Thu, 26 Oct 2006 16:09:45 GMT

It's a security feature. Requires knowing two passwords to get full access to the device.

HTH and please rate if it does.

Re: automatic jump to privilege level 15 in PIX/ASA

wojciech.wojcik — Wed, 07 Jul 2010 07:26:20 GMT

I have the same kind of problem but with different RADIUS server (FreeRADIUS) and ASA 5520 (7.2). Is there a way to log into ASA with defined privilege level ? It is possible to define local user but it doesn't work with RADIUS logging enabled.

Thanks in advance for any help

Re: automatic jump to privilege level 15 in PIX/ASA

Farrukh Haroon — Thu, 08 Jul 2010 14:02:04 GMT

I have to disagree here.

It's not a security feature. The privilege level feature was never properly implemented in the PIX/ASA. You may call it a bug

I would have been a security feature if it would be implemented on all privilege levels besides level 15, so that users were prevented from going directly to priv. exec mode. But on the ASA/PIX, it does not work for any level (as the feature was not implemented).

Regards

Farrukh