Hi,

Yes, it's possible to log commands, logins, etc. to the PIX/ASA itself.

aaa accounting command tacacs-group
aaa accounting enable console tacacs-group
aaa accounting ssh console tacacs-group

Available as of 7.0 or so.


Kaj

On Jan 23, 2008, at 13:08, Joseph Jackson wrote:

Hey all,

I know in the past the pix/asa would not generate account records of what command were entered on the device. Does anyone know if this has changed? I've read some docs that talk about accounting traffic that passes THROUGH the device but not accounting for what commands are entered on the device
from what user,  like you get on a IOS router.


Thanks

Joseph
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/




HTH

Kaj
--
Kaj J. Niemi
<[EMAIL PROTECTED]>
+358 45 63 12000



_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to