https://community.cisco.com/t5/network-security/dynamic-access-options-with-ftd/m-p/3726665#M11694 <P>Is there any way, or has anyone had any luck coming up with a working solution with the current verison of FTD for dynamic access policies on VPN Anyconnect clients using FTD firewalls? Can you use a DACL with ISE or a Radius server? Can you use LDAP group membership to determine which ACL will apply to you? FTD is being sold as a drop in ASA replacement but as a field engineer who implements these I am not seeing a workable workaround for this that can keep a single URL and determine access list by user name as you could with at DAP. If anyone has a suggestion for a method to work around this using FTD it would be appreciated. Its a critical function of remote acess. Thanks!</P> Fri, 21 Feb 2020 16:21:47 GMT klanard 2020-02-21T16:21:47Z https://community.cisco.com/t5/network-security/dynamic-access-options-with-ftd/m-p/3726665#M11694 <P>Is there any way, or has anyone had any luck coming up with a working solution with the current verison of FTD for dynamic access policies on VPN Anyconnect clients using FTD firewalls? Can you use a DACL with ISE or a Radius server? Can you use LDAP group membership to determine which ACL will apply to you? FTD is being sold as a drop in ASA replacement but as a field engineer who implements these I am not seeing a workable workaround for this that can keep a single URL and determine access list by user name as you could with at DAP. If anyone has a suggestion for a method to work around this using FTD it would be appreciated. Its a critical function of remote acess. Thanks!</P> Fri, 21 Feb 2020 16:21:47 GMT https://community.cisco.com/t5/network-security/dynamic-access-options-with-ftd/m-p/3726665#M11694 klanard 2020-02-21T16:21:47Z https://community.cisco.com/t5/network-security/dynamic-access-options-with-ftd/m-p/3726797#M11696 Short answer no. I even open a tac ticket for this and got it confirmed.<BR />They said it will be on for the next release of FTD. CoA isn't supported<BR />which is the main problem for DACL not working.<BR /> Wed, 17 Oct 2018 06:36:00 GMT https://community.cisco.com/t5/network-security/dynamic-access-options-with-ftd/m-p/3726797#M11696 Mohammed al Baqari 2018-10-17T06:36:00Z