topic PIX Command Authorization in Network Security https://community.cisco.com/t5/network-security/pix-command-authorization/m-p/841697#M494206 <P>I have cisco PIX 525. I want my junior engineer to restrict to show commands. I dont want him to configure access-list and anything else. He is only suppose to sh the running and other show commands.</P><P></P><P>I have made a user A and assign him with privilage 7. But when i log in with this user i was able to configure all things.</P><P></P><P>username A password muljoLmw8YN8dG2h encrypted privilege 7</P><P></P><P></P><P>I wana authenticate user locally and rest of all things local database. No external ACS.</P><P></P><P>kindly tell me how to configure Firewall for this thing.</P> Fri, 21 Feb 2020 09:52:53 GMT wasiimcisco 2020-02-21T09:52:53Z PIX Command Authorization https://community.cisco.com/t5/network-security/pix-command-authorization/m-p/841697#M494206 <P>I have cisco PIX 525. I want my junior engineer to restrict to show commands. I dont want him to configure access-list and anything else. He is only suppose to sh the running and other show commands.</P><P></P><P>I have made a user A and assign him with privilage 7. But when i log in with this user i was able to configure all things.</P><P></P><P>username A password muljoLmw8YN8dG2h encrypted privilege 7</P><P></P><P></P><P>I wana authenticate user locally and rest of all things local database. No external ACS.</P><P></P><P>kindly tell me how to configure Firewall for this thing.</P> Fri, 21 Feb 2020 09:52:53 GMT https://community.cisco.com/t5/network-security/pix-command-authorization/m-p/841697#M494206 wasiimcisco 2020-02-21T09:52:53Z Re: PIX Command Authorization https://community.cisco.com/t5/network-security/pix-command-authorization/m-p/841698#M494211 <HTML><HEAD></HEAD><BODY><P>Try using privilege 5 instead of 7. With 5 he should not be able to enter config mode, but do show run or show ver etc. but no configs privilege... try that.</P><P></P><P>Rgds</P><P>Jorge</P><P></P></BODY></HTML> Sun, 03 Feb 2008 01:22:38 GMT https://community.cisco.com/t5/network-security/pix-command-authorization/m-p/841698#M494211 JORGE RODRIGUEZ 2008-02-03T01:22:38Z