topic Re: SSL Multiple Tunnel Groups with Multiple group policies in Network Security https://community.cisco.com/t5/network-security/ssl-multiple-tunnel-groups-with-multiple-group-policies/m-p/1346021#M948275 <HTML><HEAD></HEAD><BODY><P>Easy. Disable the drop-down list, and use the authentication-server (LDAP or Radius) in the DefaultWEBVPNGroup. By default when you browse to the ASA, it will be using the DefaultWEBVPNGroup. Let LDAP or Radius take care of the rest.</P><P></P><P>You will get the functionality you are looking for.</P><P></P><P>HTH</P><P></P><P>PS. If this post was helpful, please rate it.</P></BODY></HTML> Thu, 08 Oct 2009 21:36:20 GMT auraza 2009-10-08T21:36:20Z SSL Multiple Tunnel Groups with Multiple group policies https://community.cisco.com/t5/network-security/ssl-multiple-tunnel-groups-with-multiple-group-policies/m-p/1346020#M948274 <P>Hello folks.</P><P></P><P>Have a query and cant seem to find an answer on the web.</P><P></P><P>I have configured SSL Clientless VPN on a lab ASA5510, using 2 tunnel groups, one for enginneers and one for staff, mapped to 2 different group policies, each with different customisation. I have mapped the AD groups to the tunnel groups using both ACS and now LDAP (currently in use), both working successfully, using group lock and LDAP map of IETF-Radius-Class to Group name ensures engineers get assigned to the engineers tunnel group and staff get mapped to the staff tunnel group only.</P><P></P><P>The question i have is....is there a way to use a single tunnel group to map the user based on AD group which will then use the correct Group-policy (1 tunnel group to multiple group-polciies). I have seen examples of doing this with different URLs but want to know if they can all use the same URL and avoid using the drop down list using aliases.</P><P></P><P>It may be a simple "No" but it would be nice to know how to do it without using the URLs or drop down list. Users are easily confused ......</P> Fri, 21 Feb 2020 11:42:30 GMT https://community.cisco.com/t5/network-security/ssl-multiple-tunnel-groups-with-multiple-group-policies/m-p/1346020#M948274 GarySLear 2020-02-21T11:42:30Z Re: SSL Multiple Tunnel Groups with Multiple group policies https://community.cisco.com/t5/network-security/ssl-multiple-tunnel-groups-with-multiple-group-policies/m-p/1346021#M948275 <HTML><HEAD></HEAD><BODY><P>Easy. Disable the drop-down list, and use the authentication-server (LDAP or Radius) in the DefaultWEBVPNGroup. By default when you browse to the ASA, it will be using the DefaultWEBVPNGroup. Let LDAP or Radius take care of the rest.</P><P></P><P>You will get the functionality you are looking for.</P><P></P><P>HTH</P><P></P><P>PS. If this post was helpful, please rate it.</P></BODY></HTML> Thu, 08 Oct 2009 21:36:20 GMT https://community.cisco.com/t5/network-security/ssl-multiple-tunnel-groups-with-multiple-group-policies/m-p/1346021#M948275 auraza 2009-10-08T21:36:20Z