topic how to disable/block CLI access from ASDM ? in Network Security

how to disable/block CLI access from ASDM ?

Imran Ahmad — Tue, 12 Mar 2019 08:07:27 GMT

Hello,

is that possible to block using CLI through ASDM ? if yes please let me know how to do

johnlloyd_13 — Sun, 14 Aug 2016 15:20:20 GMT

hi,

are you referring to telnet/SSH remote access?

the setup is reverse in ASA/ASDM wherein you only allow certain IP address or subnet to have telnet/SSH access to the box.

in ASDM: Configuration > Device Management > Management Access > ASDM/HTTPS/Telnet/SSH > Add (see attached).

Imran Ahmad — Mon, 15 Aug 2016 04:16:54 GMT

I need to block (Command Line Interface) option which is available on ASDM

what you say is normally blocking ssh/telnet access.

johnlloyd_13 — Mon, 15 Aug 2016 06:04:27 GMT

can you share a screenshot of what you're describing in ASDM?

Imran Ahmad — Mon, 15 Aug 2016 10:51:44 GMT

Attached please

johnlloyd_13 — Mon, 15 Aug 2016 11:47:39 GMT

AFAIK you can't disable this as it's part of ASDM function/feature.

you could only 'lock-down' specific IPs or subnets as suggested above.

B. BELHADJ — Mon, 15 Aug 2016 18:07:11 GMT

Hi Imran,

If you would like disable CLI when delivering configurations, you can do it like the attached screenshot 🙂

Please let us know if you would like this functionality or somethings else.

Best regards.

Imran Ahmad — Tue, 16 Aug 2016 04:15:08 GMT

But what if i want some users to be able to access the GUI of the ASA using ASDM but should not be able to see the CLI command configurations ?