topic pdm in Network Access Control

pdm

lyes.ouarti — Sun, 10 Mar 2019 20:47:14 GMT

hi, i have enabled Pdm on my Pix 535 for my senior it security manager, in order for him to see what's going on. i created a username with level 1, but the problem is that when i log to the pix with that username, i am able to upgrade the level from 1 to 15. and i don't want this.

can anyone help please.

thanks/.

Re: pdm

jsivulka — Tue, 14 Sep 2004 18:58:57 GMT

Basically, what you need to do is to create an privilege level which allows the user to view the configuration but not modify it. You will need to move the config commands to higher privilege levels, allowing only show, debugs etc at this level. You can then create a account for your manager and assign this privilege level to him.