Good Morning,
Im trying at the moment to adapt what we already have setup for authenticating IPSEC vpns.Currently below is how this is setup.
We would like add ACLs based on which 3rd party company is dialing in. I understand how to do this with local usernames but not when talking to AD.
Sorry if this is unclear thanks in advance.The tunnel group names are different for each company but again now sure where id add this filter.
Thanks
S
Service Selection
Protocol: match Radius
NDG:Device Type in All Device Types:Firewall
NDG:Location Any
Device IP Address: x.x.x.x
End Station: Filter Any
Service: VPNAccess
VPNAccess
IdentitySource: OTPthenAD (Using OTP server and AD Groups)
Standard Policy
Rule 1
Name Staff
Compoud Condition AD-AD1: StaffGroup
Permit Access
Rule 2
Name Staff
Compoud Condition AD-AD1: 3rdParty
Permit Access
