CISSP Training Guide

Access Control Methodologies

Discuss centralized /decentralized control.

This section examines two primary remote access controls: Remote Authentication Dial-In User Service (RADIUS) and Terminal Access Controller Access Control System (TACACS). (Actually, in most cases when you see a reference to TACACS, they are referring to TACACS+, which has some more advanced features.)

Centralized/Remote Authentication Access Controls

RADIUS and TACACS+ are usually used interchangeably for remote access controls. They are typically used when users are required to authenticate to different applications and you do not want to manage a separate listing of user accounts for each application. Instead, you would point all the applications to your RADIUS or TACACS+ ...