ASA AAA

[chinhpham@ems.att.com]

I am using ASA 9.8.4, moving from ASA 9.0, the command below doesn't work, seems protocol nt is removed:

# aaa-server ActiveDirectory protocol nt
                                                          ^
ERROR: % Invalid input detected at '^' marker.

Here are possible options:

# aaa-server ActiveDirectory protocol ?
configure mode commands/options:
  http-form  Protocol HTTP form-based
  kerberos   Protocol Kerberos
  ldap       Protocol LDAP
  radius     Protocol RADIUS
  sdi        Protocol SDI
  tacacs+    Protocol TACACS+

Would the nt option was removed from this version?

[Rahul Govindan]

NT auth was removed in 9.3 version. Release notes below:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa93/release/notes/asarn93.html

LDAP or RADIUS authentication would be the way to go moving forward.