prevent SSL VPN user from accessing ASA cli

[raf.vanderveken]

Hi ,

I've configured several users on my ASA in it's local database.

Those users are used for ssl vpn login, but the problem that I have is that those users

also have SSH access. Is it possible to prevent this ?

Thanks

[Bastien Migette · Accepted solution]

Hello Raf,

If you do something like this:

username xxx attributes

   service-type remote-access

the user shouldn't get CLI access anymore.

Regards,

Bastien

[raf.vanderveken]

Hi bastien,

I already tried that but still the user is able to get CLI access.

grtz

raf

[Bastien Migette · Accepted solution]

Hi Raf,

Please try to add the following command:

aaa authorization exec LOCAL

This should fix your problem.