You need to specify the cmd-arg multiple times, one for each space
separated argument:
authorizedgroup deny service=shell cmd=changeto
cmd-arg=context cmd-arg=system
authorizedgroup permit service=shell cmd=changeto
cmd-arg=context cmd-arg=
authorizedgroup deny .*
BR Alex
On 2015-01-05 15:2
On 5.1.2015 15.34, Steve Normoyle wrote:
> I have a Cisco ASA with multiple context. I am trying to deny the use
> of the command "changeto context system", but allow authorized group to
> be able to change to any of the other context. When user types in the
> command they get denied.
Hello Ste
I have a Cisco ASA with multiple context. I am trying to deny the use of the
command "changeto context system", but allow authorized group to be able to
change to any of the other context. When user types in the command they get
denied.
I have entered
"authorizedgroup permit service=shell cm
