topic Re: PAN OS and TACACS+ in General Topics

PAN OS and TACACS+

Oleksandr — Tue, 11 Jun 2013 15:00:04 GMT

Hi There,

Is it possible to tie together a PANOS and TACACS+ for authorization of commands? If not, how it possible to restrict access for some cisco network equipment? Any ideas?

Re: PAN OS and TACACS+

VinceM — Wed, 12 Jun 2013 14:13:43 GMT

Hi,

Tacacs is not supported by pan.

Which type of righ you want to give to your cisco equipement ?

Re: PAN OS and TACACS+

Oleksandr — Wed, 12 Jun 2013 14:21:47 GMT

Hi,

Not to equipment, I want to restrict executing some command for users (admins).

For instance (conf term, delete, sho version, etc) and log any activities on that device.

Regards,

Alex

Re: PAN OS and TACACS+

VinceM — Wed, 12 Jun 2013 14:29:48 GMT

Hi,

For me, not possible to limit access to certain command line. You give acces or you don't, it's global.

Meybe the good way for you for providing some info to admin should be to go through an API portal like this one: https://live.paloaltonetworks.com/docs/DOC-4581.

Can be very usefull.

Re: PAN OS and TACACS+

mikand — Wed, 12 Jun 2013 22:45:52 GMT

Ehm isnt this part of the tacacs+ that except for auth and logging it can also limit which commands will be available for the particular user?

As described in http://movement3.wordpress.com/2012/04/20/using-cisco-acs-to-limit-commands-shell-command-authorization-sets/

Re: PAN OS and TACACS+

PanIst — Mon, 10 Nov 2014 20:22:15 GMT

still not supported ? TACACS + ?

Re: PAN OS and TACACS+

VinceM — Wed, 12 Nov 2014 09:11:11 GMT

Hi,

No ... In 6.1, no trace of tacacs..... yet