Dell Powerconnect W-ClearPass Hardware Appliances W-ClearPass Policy Manager 6 - Page 226

Figure 194: TACACS+ Enforcement Profiles (Commands tab) Table 120: Commands tab (TACACS+ Enforcement Profiles) Container Description Service Type Select Shell or PIX shell radio button. Subsequent selections in this tab configure commands and arguments allowed/disallowed for this selection. Unmatched Enable to permit commands that are not explicitly entered in the Commands field. Commands Commands Contains a list of the commands recognized for the specified Service Type: To add a command, click Add. In the Configure Tacacs Command Authorization popup, enter values for: l Command. A string for the command. This is followed by one or more command argument rows. l Command Arguments. The arguments for the command. l Action. Click on Enable to permit check box to permit use of this command argument. If this box is unchecked the column shows Deny and the command argument is not allowed. l Click Trashcan to delete the command argument. l Unmatched Arguments. Select Permit radio button to permit this command even if Policy Manager receives arguments for the command that it does not recognize. Select Deny radio button to deny the command if Policy Manager receives unrecognized arguments. To save and exit, click outside the row you are editing. To delete a command, click the Trashcan icon for that row. Application Enforcement Profiles Application Enforcement Profiles contain attribute-value pairs and other permissions related to authorization of users of Dell Applications - GuestConnect and Insight. There are three different types of application enforcement profile templates that can be selected: l ClearPass Insight Enforcement - Attributes for users of Insight application. 226 Dell Networking W-ClearPass Policy Manager 6.0 | User Guide