AAA for AIP-SSM-40

[Ihssan Alibouch]

Hi,

Can AAA be activated with the IPS module of the ASA (AIP-SSM card). if so, please let me know how?

Thx in advance
Ihssan

[stojanr]

Cisco IPS devices support authentication of admin users via Radius since the 7.1.4 software release .

Sent from Cisco Technical Support iPad App

[Ihssan Alibouch]

I am referring to the AIP-SSM-40 IPS module not the device

[stojanr]

Standalone IPS appliances and ASA IPS modules run almost identical software. The RADIUS authentication is available on both, standalone and Asa modules.

Sent from Cisco Technical Support iPad App

[jocamare]

Here,

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_example09186a0080b7c511.shtml

[Ihssan Alibouch]

This is for Authentication via a Radius server.

How about Authorization and Accounting. Is it supported on the IPS module of the firewall?

[stojanr · Accepted solution]

Please see the following URL:

http://www.cisco.com/en/US/docs/security/ips/7.1/configuration/guide/idm/idm_setup.html#wp1245416

As stated here, Authentication and Authorization are supported, but Accounting messages aren't sent to the RADIUS backend.

[Ihssan Alibouch]

Thx for your help

Ihssan