ASA Remote-Access VPN

fatalXerror — Fri, 21 Feb 2020 14:17:25 GMT

Hi Experts,

I am using an ASA as my VPN concentrator and I am configuring 1 tunnel group and multiple group policies so that the client will just connect to just 1 tunnel and their group assignment will be assigned in the backend.

I also have RSA for 2 factor authentication and this RSA is integrated to the AD and it runs as RADIUS server.

I made a similar design before but, at that time I am using Cisco ISE as my RADIUS server. What I did at that time is that Cisco ISE returns Radius.Class attributes to ASA so that ASA can assign group-policy.

My question is this, does the RSA running as the RADIUS server & 2 factor authentication can do also the same thing; returning radius.class attribute to ASA?

Thanks

Re: ASA Remote-Access VPN

Francesco Molino — Mon, 11 Sep 2017 02:38:55 GMT

Hi

Yes you can send what ever attribute you want. You can create also specify radius attributes.
Here an example:
https://community.rsa.com/docs/DOC-46884

You can also add the RSA radius to Cisco ISE to get an accept our reject answer and ISE will send back the profile to your user.

topic Re: ASA Remote-Access VPN in Network Security

ASA Remote-Access VPN

Re: ASA Remote-Access VPN