topic Authentication with Active Directory in Network Access Control https://community.cisco.com/t5/network-access-control/authentication-with-active-directory/m-p/309914#M3115 <P>I have a VPN between Cisco VPN clients and a PIX firewall. Is it possible to authenticate against the users in the AD in order to have the same access rights and policies as if they were connected to the LAN? </P><P></P> Fri, 21 Feb 2020 18:10:24 GMT 6rlopez_2 2020-02-21T18:10:24Z Authentication with Active Directory https://community.cisco.com/t5/network-access-control/authentication-with-active-directory/m-p/309914#M3115 <P>I have a VPN between Cisco VPN clients and a PIX firewall. Is it possible to authenticate against the users in the AD in order to have the same access rights and policies as if they were connected to the LAN? </P><P></P> Fri, 21 Feb 2020 18:10:24 GMT https://community.cisco.com/t5/network-access-control/authentication-with-active-directory/m-p/309914#M3115 6rlopez_2 2020-02-21T18:10:24Z Re: Authentication with Active Directory https://community.cisco.com/t5/network-access-control/authentication-with-active-directory/m-p/309915#M3116 <HTML><HEAD></HEAD><BODY><P>Yes, you can implement a RADIUS AAA server solution like the Cisco ACS server. With this you can prompt for user authentication after PHASE I of the VPN connection. The user will be prompted for a username and password which the PIX will then forward to the ACS which will be pointed to the Active Directory database for users authentication.</P><P></P><P>You could also configure the VPN client to create the VPN tunnel before login so that when the users log into the network (after the VPN connection) they will loggin directly into the Domain and their login scripts will run etc...</P><P></P><P>Hope this helps,</P><P></P><P>Curt</P></BODY></HTML> Wed, 02 Jun 2004 23:07:28 GMT https://community.cisco.com/t5/network-access-control/authentication-with-active-directory/m-p/309915#M3116 cgregg 2004-06-02T23:07:28Z