topic Re: FMC with FTD - VPN with AD Auth using email in Network Security

FMC with FTD - VPN with AD Auth using email

Tibor M — Fri, 14 Jun 2024 11:24:12 GMT

Hi,

On ASA we used "userPrincipalName" attribute as username for VPN as we wanted everybody use email address as "samaccountname" is too short for some users. How this can be achieved on FTD managed by FMC? (both version 7.4)

Thanks

Re: FMC with FTD - VPN with AD Auth using email

tvotna — Fri, 14 Jun 2024 13:07:40 GMT

This is not possible from the GUI, because the following bug hasn't been fixed: CSCvi07018. This might be possible to achieve with FlexConfig.

Re: FMC with FTD - VPN with AD Auth using email

Tibor M — Fri, 14 Jun 2024 14:19:20 GMT

thanks for the tip. any suggestion how to do it? never used flexconfig, I'm new to FMC/FTD.

but if this guide is correct, edit of aaa-server is prohibited.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/flex-config.html?bookSearch=true

Re: FMC with FTD - VPN with AD Auth using email

tvotna — Fri, 14 Jun 2024 14:33:59 GMT

I didn't try myself.