Manualsbrain.com
  1. Manuais
  2. Marcas
  3. Cisco
  4. Cisco Identity Services Engine 1.2
  5. Folheto

Cisco Cisco Identity Services Engine 1.2 Folheto

Download
Página de 28
  
 
 
보안
 액세스 방법 가이드 
S  규칙 이름 
조건
 
명령
 집합 
셸
 프로파일 
√
 
 
 
Security 
East 
DEVICE:Location 
CONTAINS
 All 
Locations#East_Coast 
AND 
demoAD:ExternalGroups 
EQUALS
 
securitydemo.net/DemoGroups/East_Coast 
AND 
demoAD:ExternalGroups 
EQUALS
 
securitydemo.net/DemoGroups/Security_Operators 
Permit_All_Commands 
ASA 관리 
√
 
 
 
Admin 
West 
DEVICE:Location 
CONTAINS
 All 
Locations#West_Coast 
AND 
demoAD:ExternalGroups 
EQUALS
 
securitydemo.net/DemoGroups/West_Coast 
AND 
demoAD:ExternalGroups 
EQUALS
 
securitydemo.net/DemoGroups/Network_Operators 
ASA_Basic
 
AND 
HelpDesk_Commands 
AND 
ASA_ReadOnly_Commands 
ASA 읽기 전용 
√
 
 
 
Admin 
East 
DEVICE:Location 
CONTAINS
 All 
Locations#East_Coast 
AND 
demoAD:ExternalGroups 
EQUALS
 
securitydemo.net/DemoGroups/East_Coast 
AND 
demoAD:ExternalGroups 
EQUALS
 
securitydemo.net/DemoGroups/Network_Operators 
ASA_Basic
 
AND
 
HelpDesk_Commands 
AND 
ASA_ReadOnly_Commands 
ASA 읽기 전용 
√
 
 
 
기본
 
일치하는
 항목이 없는 경우
 
DenyAllCommands 
그림
 18. ASA Regular에 대한 권한 부여 정책 
 
이제
 ASA 디바이스의 디바이스 관리를 위한 ISE 컨피그레이션을 마쳤습니다. 
 
 
 
Cisco Systems © 2016 
19 페이지