topic Re: Tacacs Server Grouping in Firewall and Security Management

Tacacs Server Grouping

ihenock101 — Wed, 25 May 2022 07:03:13 GMT

Hi All

I want to integrate ISE with checkpoint for Device Administration and I have two TACACS servers. However when I configure the TACACS server in the checkpoint I can only associate the user only with one of the two TACACS servers is there any way two associate to associate or grouping the TACACS servers, there is an option for RADIUS Group in the object creation but I Can't get ?

Re: Tacacs Server Grouping

Sorin_Gogean — Wed, 25 May 2022 08:17:59 GMT

Hey,

Not sure why are you confused, as the on TACACS settings you can add multiple servers - see below - and Radius we use for SmartConsole access...

So where exactly you see the limitation ?

Thank you,

Re: Tacacs Server Grouping

PhoneBoy — Thu, 26 May 2022 05:22:16 GMT

The option for TACACS groups was added in R81.10, I believe.

Re: Tacacs Server Grouping

Viktor_Karlsson — Tue, 31 May 2022 07:01:56 GMT

Yes it was added in R81.10 and working very well.

This is to be clear in SmartConsle for administrator authentication and now you can use a tacacs group as authentication instead of single tacacs servers.

Re: Tacacs Server Grouping

ihenock101 — Thu, 02 Jun 2022 12:33:27 GMT

Thanks @Sorin_Gogean I was trying on the smartconsole that's why I didn't get it Thanks a lot.