Cisco ASA AAA Configuration

AAA is an architectural framework for configuring a set of three independent security functions in a consistent manner. AAA provides a modular way of performing Authentication, Authorization and Accounting. When configure AAA in Cisco ASA via GUI interface-ASDM, the users might still be able to access to all resource in ASA, and not be controller what can do and what can not by Authorization component. The reason is that aaa authorization exec authentication-server command still be executed in CLI to enable AAA Authorization to external LDAP/RADIUS/TACACS+ servers. Similar to Cisco switch, aaa new model command need be executed in CLI to enable AAA in switch.