ASA AD integration allow VPN only to certain AD group

[jeroenhermans]

Hi,

I've setup the integration between Active Directory and my ASA. I've made an attribute map that maps an AD security group to a ASA group policy. This is working fine.

I would now only like to allow VPN to the users that are member of these AD groups. Any user that is not a member should be denied. How can I accomplish this?

Thanks,

Jeroen

[Bastien Migette]

I think you are looking for the group lock feature:

http://www.cisco.com/en/US/partner/docs/security/asa/asa83/command/reference/gh.html#wp1800328