RE: [FW1] TACACS+ Problem

[Jim Brown <Jim.Brown@FW1-NOSPAMCaseLogic.com>]

Is this a bug or a feature? 

I posted the same issue several weeks ago. 

*generic works until you add an individual account then that account must be
included to be considered for authentication.

It is like the rulebase remembers that you removed the account therefore it
is an exclusion.

It's driving me nuts.


-----Original Message-----
From: Curt A. Miller [mailto:MILLERCA@Bowater.com]
Sent: Friday, November 03, 2000 6:16 AM
To: fw-1-mailinglist
Subject: [FW1] TACACS+ Problem



I am having a strange new problem.  We added some more people to for having
access via the firewall.  We are using the generic* group and a CiscoSecure
Tacacs+ server.  After adding the one or two people, noone can access the
server behind the firewall.  If I add the person as an individual and set up
as
using TACACS+ it works fine.  We are using 4.0 server on NT.  Any ideas?

Thanks,
Curt



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================