cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
448
Views
0
Helpful
1
Replies

Web-Proxy(cut-through) without ACS on 55xx

tahequivoice
Level 2
Level 2

Is it possible? All I have read about it requires an external server.

1 Reply 1

Farrukh Haroon
VIP Alumni
VIP Alumni

I think that is a limitation of IOS Auth-Proxy and not ASA/PIX Cut-Through.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_c/ftrafwl/scfauthp.htm#wp1001164

However AFAIK you can only authenticate using local password database and not authorize using it (for CUT-THRUOGH). Have a look at this table:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/aaa.html#wp1069492

Please rate if helpful.

Regards

Farrukh