TACACS+ Sensor
TACACS+ provides access control for routers, network access servers, and networked computing devices via one or more centralized servers. TACACS+ provides separate authentication, authorization, and accounting services.
The TACACS+ sensor checks the server connectivity and tries to authenticate a specified user. Sensor requires - TACACS server shared secret - used for data encryption - user (with password) to authenticate
The sensor should be added to the TACACS+ server machine.
Alerts:
- alert on connection error
- alert when user authentication failed
Counters
- Response time - total execution time of all queries in the TACACS session