Using TACACS+ as an external authentication server for administration purposes is supported beginning with ScreenOS 6.0.0 and higher.
Note: TACACS+ is not supported for use as an authentication server for xauth or policy authentication.
On the firewall device, the TACACS server object needs to be configured. In this example, the TACACS server is called "external". The CLI commands required for this are as follows: