topic Re: webvpn selective user in Network Security https://community.cisco.com/t5/network-security/webvpn-selective-user/m-p/926052#M938729 <HTML><HEAD></HEAD><BODY><P>I'm able to do it using 5510, MS 2003 AD as LDAP, and MS 2003 IAS as RADIUS. </P><P></P><P>- Create users and assign to their group in AD </P><P>- Create policy per user group. i.e. destination IP Address and ports. </P><P></P><P>User login by just knowing their username and password. Their usergroup is transparent to them, there is no drop-down list for user to select their group. </P><P></P><P>The downside of this is that you cannot assign different IP Pool per usergroup. If you want different IP Pool per user group, they wil lsee the drop-down list and they have to select their usergroup from the list. If they select the wrong usergroup, they will not be able to login. If you have too many usergroup, it wil lnot be pretty to see them all in the drop-down list. </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.2/user/guide/pobjpage.html" target="_blank">http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.2/user/guide/pobjpage.html</A></P><P></P></BODY></HTML> Wed, 30 Apr 2008 18:57:30 GMT htarra 2008-04-30T18:57:30Z webvpn selective user https://community.cisco.com/t5/network-security/webvpn-selective-user/m-p/926051#M938728 <P>Hi,</P><P></P><P>I have configured webvpn as well and ipsec client vpn on asa 5510 7.2(3). I want webvpn to be enabled only for selected ids, at present all ipsec client vpn users are also able to login to web vpn.</P><P></P><P>Gaurang.</P> Mon, 11 Mar 2019 12:36:33 GMT https://community.cisco.com/t5/network-security/webvpn-selective-user/m-p/926051#M938728 gaurang_pandya 2019-03-11T12:36:33Z Re: webvpn selective user https://community.cisco.com/t5/network-security/webvpn-selective-user/m-p/926052#M938729 <HTML><HEAD></HEAD><BODY><P>I'm able to do it using 5510, MS 2003 AD as LDAP, and MS 2003 IAS as RADIUS. </P><P></P><P>- Create users and assign to their group in AD </P><P>- Create policy per user group. i.e. destination IP Address and ports. </P><P></P><P>User login by just knowing their username and password. Their usergroup is transparent to them, there is no drop-down list for user to select their group. </P><P></P><P>The downside of this is that you cannot assign different IP Pool per usergroup. If you want different IP Pool per user group, they wil lsee the drop-down list and they have to select their usergroup from the list. If they select the wrong usergroup, they will not be able to login. If you have too many usergroup, it wil lnot be pretty to see them all in the drop-down list. </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.2/user/guide/pobjpage.html" target="_blank">http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.2/user/guide/pobjpage.html</A></P><P></P></BODY></HTML> Wed, 30 Apr 2008 18:57:30 GMT https://community.cisco.com/t5/network-security/webvpn-selective-user/m-p/926052#M938729 htarra 2008-04-30T18:57:30Z