You must manually configure console authentication using an AAA statement. Local username authentication however is a little bit different. This command is executed in the same manner as well, enable password PASSWORD It is a password to authenticate you to access privileged mode of the Cisco ASA from which you can make configuration changes. The enable password functions in the same manner as the Cisco IOS enable password. Commonly this would be either local authentication or Radius via Windows Server to authenticate to Active Directory.
While most enterprises use a Cisco ACS server to control Single Sign On (SSO) utilizing active directory, some company are too small to afford this type of security solution and must go with a simple but secure solution. On the Cisco 5505’s, there will be a basic configuration out of the box to get your ASA working in very little time, however 5510’s or bigger will come with a blank configuration from the factory. The Cisco ASA by default has a blank enable password out of the box and you would be amazed with how many people NEVER change this password or if they do change the password they change it to “cisco” which of course is super secure, sarcastically speaking… When dealing with a Cisco ASA that has no existing configuration, you will be prompted for the Interactive Setup. You would never put a computer that has unrestricted access to corporate servers in the visitors lounge with no password so why in the world would you put a firewall on your network that has no password? That of which the very function of this device is to secure your network from unauthorized access.
0 kommentar(er)
