Firewall Wizards: RE: PIX Authentication Question

["Melson, Paul" <PMelson () sequoianet com>]

In order to do this, you must use AAA authentication for enable mode:

aaa authentication enable console admin-group
timeout uauth 00:15:00 inactivity

This would mean that users that can authenticate via the admin-group (see aaa-server) can access enabled mode on the 
PIX, and that after 15m of idle time, they must re-authenticate.  However, the uauth timeout can only be set once, so 
if users authenticate to the PIX for other things (outbound access, for instance), this idle time affects them as well.

PaulM

-----Original Message-----
I am looking for a way to have authentication timed-out on a direct console
connection. e.g. If I authenticate with enable is there anyway to have it
automatically log me off after a set time period?  I am running a Cisco PIX
520 ver 6.2(2).  Any help would be appreciated.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards