7-2
Cisco ASA Series Firewall CLI Configuration Guide
Chapter7 Configuring AAA Rules for Network Access
Guidelines and Limitations
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
Supported in single and multiple context mode.
Firewall Mode Guidelines
Supported in routed and transparent firewall mode.
IPv6 Guidelines
Supports IPv6.
Additional Guidelines
In clustering, this feature is only supported on the master unit.
Configuring Authentication for Network Access
This section includes the following topics:
•Information About Authentication, page7-2
•Configuring Network Access Authentication, page7-7
•Enabling Secure Authentication of Web Clients, page 7-10
•Authenticating Directly with the ASA, page7-11

Information About Authentication

The ASA lets you configure network access authentication using AAA servers. This section includes the
following topics:
•One-Time Authentication, page7-3
•Applications Required to Receive an Authentication Challenge, page7-3
•ASA Authentication Prompts, page7-3
•AAA Prompts and Identity Firewall, page7-4
•AAA Rules as a Backup Authentication Method, page7-5
•Static PAT and HTTP, page 7-5