topic Authentication of admin for the NGFW firewall through TACAS+ Server in Integration Discussions

Authentication of admin for the NGFW firewall through TACAS+ Server

tamilvanan — Sat, 24 Jul 2021 14:53:15 GMT

Hi All,

We are using TACAS+ Server profile(integrated with Cisco ISE) for authentication of our admin users.

Both the username and password authentication from Firewall admin users are done through TACAS Server auth profile.

On firewall we are having two locally created two super user admins.

When an admin with super user access is authenticated into the firewall through TACAS server they are not able to see the details of the two locally created admin account details. Is this an expected behavior.

Re: Authentication of admin for the NGFW firewall through TACAS+ Server

PavelK — Tue, 07 Sep 2021 12:35:50 GMT

Thank you for posting this question @tamilvanan

I am having identical setup, also leveraging Cisco ISE for TACACS+ admin access to PA Firewall, however I am not experiencing the issue you described, so I would say this is not expected. When you mentioned you are not able to see details of locally created admin accounts, do you mean you can't see them configured at all? How does it look like when you issue from CLI: show admins all

Kind Regards

Pavel