config commands authorization on ASA

[r.spiandorello]

Hi, is there a way to control the config commands with tacacs+ authorization ?

When I enable the configure command, in ACS shell coomand authorization set, all other config commands are enabled.

In IOS there's the "aaa authorization config-commands", how to with ASA ?

[Jagdeep Gambhir]

Please check this link that explains about command authorization on ASA.

these commands are required on ASA/PIX/FWSM in order to implement command authorization through an ACS server:

aaa-server authserver protocol tacacs+

aaa-server authserver host 10.1.1.1

aaa authorization command authserver

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

Regards,

~JG

Do rate helpful posts