| 13.5 |  | Command Authorization |
| 13.5.1 |  | Command authorization overview |

| Like any network device, it is necessary to be able to administrate the PIX Security Appliance from both local and remote locations. However, providing administrative access to any device, especially a firewall, has to be done very carefully or significant security risks will be created.

Command authorization allows an administrator to securely administer the PIX Security Appliance from local and remote locations. There are three methods of command authorization that can be used to control which users execute certain commands:

1. Enable level with password
2. Local command authorization
3. Access Control Server (ACS) command authorization

How to configure and use each of these methods will now be explained.