Cisco any connect

[Lauriewen]

Hello,

Could you please tell me why every user who connects to vpn with Cisco any connect must have a license on a MFA server?

What is the point and what would happen if a user does not have a license?

Thank you very much.

[balaji.bandi]

how is your user authentication with what source? using AD ? then if you replication an AD user based with an MFA provider, then every user needs to have to be present with a provider, if not token or MFA authentication method is not going to work.

[Lauriewen]

Yes using AD

Sorry, I dont understand your answer

[balaji.bandi]

Let me put this way :

What is the point and what would happen if a user does not have a license?

In AD you have to have a different group that needs remote access take the example you have a group of 100 users, then you need to have 100 MFA Licenses since each user required different tokens for authentication.

if the user does not has the license, no tokens will be issued, which means 100 users required 100 Licenses.