Authentication of admin for the NGFW firewall through TACAS+ Server

[tamilvanan]

Hi All,

We are using TACAS+ Server profile(integrated with Cisco ISE) for authentication of our admin users.

Both the username and password authentication from Firewall admin users are done through TACAS Server auth profile.

On firewall we are having two locally created two super user admins.

When an admin with super user access is authenticated into the firewall through TACAS server they are not able to see the details of the two locally created admin account details. Is this an expected behavior.

[PavelK]

Thank you for posting this question @tamilvanan 

I am having identical setup, also leveraging Cisco ISE for TACACS+ admin access to PA Firewall, however I am not experiencing the issue you described, so I would say this is not expected. When you mentioned you are not able to see details of locally created admin accounts, do you mean you can't see them configured at all? How does it look like when you issue from CLI: show admins all 

Kind Regards

Pavel