Configure the Cisco PIX or ASA Firewall

Enter the following commands at each firewall while in configuration mode:

Note: Record these values, and use them to configure Forescout communication with the firewall as described in Configure the Cisco PIX/ASA Firewall Integration Module.

Enable SSH access from a Forescout device:
Refer to Cisco documentation for general instructions on how to enable SSH access to the firewall. You will probably need to issue the following sequence of commands:
```
ca gen rsa key 1024
ca save all
aaa authentication ssh console LOCAL
write mem
```
To enable SSH access from a Forescout device, select INSIDE or OUTSIDE depending on the interface to which the Forescout device connects.
Define a user name (the default is forescout), password and restrictive privilege level (priv_level) (the default is 4) for the Forescout device user:

username <user_name> password <user_password> privilege <priv_level>

Define the privilege level permissions:

enable password <priv_password> level <priv_level>
privilege configure level <priv_level> mode enable command configure
privilege configure level <priv_level> command object-group
privilege show level <priv_level> command object-group
privilege configure level <priv_level> command network-object
privilege configure level <priv_level> command port-object
privilege configure level <priv_level> command pdm