Pfsense support tacacs server?

[alberto.tovar]

Hi comunity!, i have planne to integrate a tacacs server to my network, and i wanna know if pfsense support it?

[johnpoz]

Support it in what sense? You want to use to auth what exactly with pfsense? Pfsense does support pointing stuff to radius, or for that matter running radius right on pfsense with freeradius.

[alberto.tovar]

Hi @johnpoz i mean, pfsense as a tacacs server

[stephenw10]

Not directly, no.

You might be able to do something with the Freeradius module but that's completely untested / unsupported.
Even if you did though you shouldn't do that. Use a separate authentication server. pfSense is a firewall.

Steve

[alberto.tovar]

ok man, thanks for the answer, what server would you recommend to me?

[johnpoz]

What other types of auth are you going to do? Freeradius is always an option.. NPS if your a windows shop.. Is there any sort of budget to purchase something? Say cisco ISE?

[alberto.tovar]

i have a doubt, ISE is only for cisco devices?

[johnpoz]

Not sure where you got that idea.. Look again on ISE
https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/compatibility/b_ise_sdt_26.html?referring_site=RE&pos=2&page=https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/compatibility/ise_sdt.html
Cisco Identity Services Engine Network Component Compatibility, Release 2.6

Again what is the scope of devices your wanting to auth?