
Note: Sometimes, Cisco differentiates Network Access from VPN access but we can use the broad phrase “Network Access” here to mean both. SSH access to a device) while Network access deals will granting users access to network resources (e.g. Device administration has to do with the management of devices (e.g. When speaking about AAA, there are generally two areas in which AAA is applied: Device administration and Network access. Note: AAA stands for Authentication (who a user is), Authorization (what a user can do), and Accounting (what a user did).

I wonder if the slightly different configuration on the Cisco ASA is responsible for this. I find that a bit weird considering that the Cisco ASA is the real security device. From my experience as a Network Security Engineer, I have worked on many Cisco projects involving AAA on the routers but not so many that involve AAA on the Cisco ASA.
