Restrict only read-only access to PIX/ASA by ACS

[wmmak]

Hi all,

Actually I am using Windows for user login authentication and ACS would accept TACACS and relay the authentication to Windows.

Can I restrict the read-only access to PIX/ASA by ACS?

Is it possible to restrict a particular user account to have read-only access on firewall, like read the access-list, connections etc.

Thanks

mak

[Jagdeep Gambhir]

Mak,

You need to set up command authorization set in acs. Check out this link,

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2086/products_user_guide_chapter09186a008052e960.html#wp697557

Regards,