topic Re: firepower security engine TACACS+ Authentication in Network Security

firepower security engine TACACS+ Authentication

Vishnu_RR — Wed, 20 Jan 2021 11:16:57 GMT

Hi team,

I have configured Cisco ISE as TACAC+ for firepower chassis. i am able to authenticate chassis with TACACS+ credentials.

But when i tried to login security engine which is not authenticating with TACACS+ but i can login using chassis local user accounts.

Looking for solutions to make security engine to authenticate with TACACS+.

Re: firepower security engine TACACS+ Authentication

Rob Ingram — Wed, 20 Jan 2021 11:32:12 GMT

@Vishnu_RR

You can configure the FXOS chassis (FCM) to use TACACS+ authentication, but the FMC does not support TACACS for user authentication. It does support RADIUS and you can create user roles to assign different privileges.

Here is a guide:-

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118541-configure-firesight-00.html

Re: firepower security engine TACACS+ Authentication

Vishnu_RR — Wed, 20 Jan 2021 12:00:36 GMT

Hi,

My question is that how to make Security Engine (Logical Device security module) to authenticate with TACACS+ ISE.

Re: firepower security engine TACACS+ Authentication

Marvin Rhoads — Wed, 20 Jan 2021 12:48:50 GMT

If the security engine is running Firepower Threat Defense (FTD) image, TACACS+ is not supported.

If it's running ASA software then it's just like a normal ASA with respect to TACACS+ (fully supported).