Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)

Disable part of ASDM?

Can you disable all of ASDM except for the Monitoring piece?  I keep trying to find information on this but am not able to locate it if it is possible at all.  Any assistance on this would be greatly appreciated.

Thanks,

Kimberly

Thanks and Cheers! Kimberly Please remember to rate helpful posts.
Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Disable part of ASDM?

ASDM is using commands to pull information and configure the ASA. So the users and their levels that apply to the ASA are the same for CLI and A

SDM. In other words priv 3, 5 and 15 segmentation is enforced with command authorization to make ASDM be able to view configs, monitor or configure. And the same privileges will hold for the same users when they try to use CL:I.

I hope it makes sense.

PK

5 REPLIES
Cisco Employee

Re: Disable part of ASDM?

You can use users of priv level 3. These guys can only use the monitoring functions.

Level 5 can view config but not change it, also and 15 can configure.

I hope it helps.

PK

Re: Disable part of ASDM?

PK,

Thank you for your response.  I am looking for something a little more specific.  We are working on deploying TACACS for CLI access to our 5540s, but when ASDM is launched, is there a way to only allow priv 3 or priv 5 for just that application but not affect CLI?

Thanks,

Kimberly

Thanks and Cheers! Kimberly Please remember to rate helpful posts.
Cisco Employee

Re: Disable part of ASDM?

ASDM is using commands to pull information and configure the ASA. So the users and their levels that apply to the ASA are the same for CLI and A

SDM. In other words priv 3, 5 and 15 segmentation is enforced with command authorization to make ASDM be able to view configs, monitor or configure. And the same privileges will hold for the same users when they try to use CL:I.

I hope it makes sense.

PK

Re: Disable part of ASDM?

PK,

Thanks again for your assistance with this.  +5 for being helpful! 

Kimberly

Thanks and Cheers! Kimberly Please remember to rate helpful posts.
Cisco Employee

Re: Disable part of ASDM?

Glad it makes sense

Regards,

PK

388
Views
0
Helpful
5
Replies
CreatePlease to create content