Disable Local Account when NAC is reachable

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Disable Local Account when NAC is reachable

L1 Bithead

Is there a way to disable the local account when an external authentication method is reachable? Only being able to log into the local account if it cant reach the external authentication server?

1 ACCEPTED SOLUTION

Accepted Solutions

Community Team Member

Hi @BradleyFergel ,

 

I don't think you can disable an admin account directly on the administrator menu.

However there's a little trick you can do:

 

First create a local user via Device > Local User Database > Users

 

kiwi_0-1659601881274.png

 

Then create a local authentication profile and add the user to it via Device > Authentication Profile

 

kiwi_1-1659601981844.png

 

Next add the administrator account and use the local authentication profile via Device > Administrators

 

kiwi_2-1659602321547.png

 

This way you can simply enable/disable the admin account by checking/unchecking the 'Enable' box on the Local User profile:

 

kiwi_3-1659602391289.png

 

If you just need a fallback authentication method then you'll probably need to look at authentication sequence where you can put multiple authentication methods in sequence where the firewall tries the configured methods sequentially from top to bottom and will deny access if ALL of the methods fail.

 

Hope this helps,

-Kiwi.

 
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!

View solution in original post

1 REPLY 1

Community Team Member

Hi @BradleyFergel ,

 

I don't think you can disable an admin account directly on the administrator menu.

However there's a little trick you can do:

 

First create a local user via Device > Local User Database > Users

 

kiwi_0-1659601881274.png

 

Then create a local authentication profile and add the user to it via Device > Authentication Profile

 

kiwi_1-1659601981844.png

 

Next add the administrator account and use the local authentication profile via Device > Administrators

 

kiwi_2-1659602321547.png

 

This way you can simply enable/disable the admin account by checking/unchecking the 'Enable' box on the Local User profile:

 

kiwi_3-1659602391289.png

 

If you just need a fallback authentication method then you'll probably need to look at authentication sequence where you can put multiple authentication methods in sequence where the firewall tries the configured methods sequentially from top to bottom and will deny access if ALL of the methods fail.

 

Hope this helps,

-Kiwi.

 
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!