Command authorization on ASA

[andrew.burns]

Hi,

Can anyone confirm that command authorization works as advertised on the ASA platform? i.e. is anyone doing this successfully at the moment?

We've no problems with authentication, accounting, NAR's, etc - just the authorization set's.

thanks,

Andrew.

[hemendoz]

Hi andrew.burns,

Command authorization should work on ASA. Please review

Configuring Command Authorization

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/config/mgaccess.htm#wp1042034

btw - what version of ASA are you using? Also, are you using shared profile components?

Hope this helps!

[andrew.burns]

Hi,

Thanks for the reply - it turns out that the solution is to not use PIX/ASA command authorisation sets for an ASA but to use a shell command authorisation set instead.

Looks like the GUI in ACS needs updating...

Andrew.