how to disable/block CLI access from ASDM ?

[Imran Ahmad]

Hello,

is that possible to block using CLI through ASDM ?  if yes please let me know how to do

[johnlloyd_13]

hi,

are you referring to telnet/SSH remote access?

the setup is reverse in ASA/ASDM wherein you only allow certain IP address or subnet to have telnet/SSH access to the box.

in ASDM: Configuration > Device Management > Management Access > ASDM/HTTPS/Telnet/SSH > Add (see attached).

[Imran Ahmad]

 I need to block (Command Line Interface) option which is available on ASDM 

what you say is normally blocking ssh/telnet access.        

[johnlloyd_13]

can you share a screenshot of what you're describing in ASDM?

[Imran Ahmad]

Attached please

[johnlloyd_13]

AFAIK you can't disable this as it's part of ASDM function/feature.

you could only 'lock-down' specific IPs or subnets as suggested above.

[Imran Ahmad]

But what if i want some users to be able to access the GUI of the ASA using ASDM but should not be able to see the CLI command configurations ?

[B. BELHADJ]

Hi Imran,

If you would like disable CLI when delivering configurations, you can do it like the attached screenshot :)

Please let us know if you would like this functionality or somethings else.

Best regards.