ASA AD integration allow VPN only to certain AD group

jeroenhermans — Mon, 11 Mar 2019 00:31:10 GMT

Hi,

I've setup the integration between Active Directory and my ASA. I've made an attribute map that maps an AD security group to a ASA group policy. This is working fine.

I would now only like to allow VPN to the users that are member of these AD groups. Any user that is not a member should be denied. How can I accomplish this?

Thanks,

Jeroen

Re: ASA AD integration allow VPN only to certain AD group

Bastien Migette — Mon, 25 Oct 2010 12:09:09 GMT

I think you are looking for the group lock feature:

http://www.cisco.com/en/US/partner/docs/security/asa/asa83/command/reference/gh.html#wp1800328

topic ASA AD integration allow VPN only to certain AD group in Network Access Control

ASA AD integration allow VPN only to certain AD group

Re: ASA AD integration allow VPN only to certain AD group