topic ASA DAP functionality in ISE in Network Access Control https://community.cisco.com/t5/network-access-control/asa-dap-functionality-in-ise/m-p/3591035#M509333 <HTML><HEAD></HEAD><BODY><P style="font-size: 15px; font-family: 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; color: #58585b;">Do we have a way to support a customer that is currently using DAP on ASA with ISE?</P><P></P><P style="font-size: 15px; font-family: 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; color: #58585b;">The customer is using DAP to assign "Basic VPN Connectivity" ACL based on LDAP group, then provide additional access with a network ACL above and beyond if they are part of a different LDAP group. They would like to centralize everything with ISE. </P></BODY></HTML> Tue, 05 Jun 2018 13:48:24 GMT gjw_csco 2018-06-05T13:48:24Z ASA DAP functionality in ISE https://community.cisco.com/t5/network-access-control/asa-dap-functionality-in-ise/m-p/3591035#M509333 <HTML><HEAD></HEAD><BODY><P style="font-size: 15px; font-family: 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; color: #58585b;">Do we have a way to support a customer that is currently using DAP on ASA with ISE?</P><P></P><P style="font-size: 15px; font-family: 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; color: #58585b;">The customer is using DAP to assign "Basic VPN Connectivity" ACL based on LDAP group, then provide additional access with a network ACL above and beyond if they are part of a different LDAP group. They would like to centralize everything with ISE. </P></BODY></HTML> Tue, 05 Jun 2018 13:48:24 GMT https://community.cisco.com/t5/network-access-control/asa-dap-functionality-in-ise/m-p/3591035#M509333 gjw_csco 2018-06-05T13:48:24Z Re: ASA DAP functionality in ISE https://community.cisco.com/t5/network-access-control/asa-dap-functionality-in-ise/m-p/3591036#M509334 <HTML><HEAD></HEAD><BODY><P>Hi Gregory,</P><P></P><P>Have you seen the response to a similar question?&nbsp; This might be what the customer is looking for:</P><P></P><P><A class="jive-link-external-small" href="https://supportforums.cisco.com/t5/vpn/asa-5525x-anyconnect-configuration-with-ise-2-1/td-p/2997585" rel="nofollow" target="_blank">https://supportforums.cisco.com/t5/vpn/asa-5525x-anyconnect-configuration-with-ise-2-1/td-p/2997585</A></P><P></P><P></P><P></P><P>Regards,</P><P>-Tim</P></BODY></HTML> Tue, 05 Jun 2018 14:00:01 GMT https://community.cisco.com/t5/network-access-control/asa-dap-functionality-in-ise/m-p/3591036#M509334 Timothy Abbott 2018-06-05T14:00:01Z Re: ASA DAP functionality in ISE https://community.cisco.com/t5/network-access-control/asa-dap-functionality-in-ise/m-p/3591037#M509338 <HTML><HEAD></HEAD><BODY><P>Yes, ISE can return an attribute like Class 25 which contains the Group Policy name.&nbsp; There is a section in DAP that allows mapping of RADIUS attributes to DAP policy.</P></BODY></HTML> Wed, 06 Jun 2018 14:17:38 GMT https://community.cisco.com/t5/network-access-control/asa-dap-functionality-in-ise/m-p/3591037#M509338 Craig Hyps 2018-06-06T14:17:38Z