ASA at remote office, ACS at head office. ASA terminates an IPSec tunnel at the remote office.
Can AAA be configured so it can be used to authenticate console/ASDM users on the remote site's firewall ?
ACS server would need to be accessed via the IPSec tunnel.
If so, how ? I'm sure I've done this in the past but can't remember what I did as a workaround.