Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
341
Views
4
Helpful
1
Replies

How deny a command on ACS v4.1

Leonardo Pena Davila
Spotlight
Spotlight

‎08-01-2007 04:32 AM - edited ‎03-10-2019 03:18 PM

Hi I'm working with a ACS v4.1 I would like to deny some commands to the members of a group (ex: deny clear logging, clear counters, etc) How can I do this?

Thanks

Regards

Leo

Labels:
0 Helpful
1 Reply 1

rochopra
Cisco Employee
Cisco Employee

‎08-01-2007 08:58 AM

You have to implement shell command authorization sets for the group.

Also you will need to configure command authorization on the devices.

Following link can give you idea how to configure this on pix:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800949d6.shtml

~Rohit

Customers Also Viewed These Support Documents