ASA remote access authentication

Larry Smith — Mon, 11 Mar 2019 05:39:40 GMT

Hello,

Is there a way to configure an ASA to dynamically assign different aaa-server groups based on AD group memberships of users trying to authenticate?

I don't seem to see a way to do this using DAP, could this be done with LDAP mappings?

Thanks in advance.

Hi Larry, You can map AD

David Johan Castro Fernandez — Wed, 22 Apr 2015 13:57:58 GMT

Hi Larry,

You can map AD group memberships to specific group policies on the ASA, you can find that configuration here:

- http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91831-mappingsvctovpn.html

Let me know if further assistance is required!

Please proceed to rate and mark as correct the helpful Post!

David Castro,

Regards,