FTD

[sadist001]

Hello,

I have some questions about FTD and AD user mapping.

For example there are some rules in Access Control Policy: If user1 is member of GroupA, then he has access to Server1, if user2 is member of GroupB, then he has access to Server2. But if there are the user3 which is member of both group, will he has access to both Servers?

How works User mapping in Access Control Policy in FTD? 

[Marvin Rhoads]

Are the rules granting access based on username and server address? Or are they using SGTs?

If the first then yes. If the second, then maybe not (if I understand the question correctly).

[sadist001]

Yes, based on username. If user is a member of the group, then he will get access to server, yes? 

What about Anyconnect using AD user for authentication/authorization? 

If user is a member of the group1 then he will get access to server1, yes? And if he also need to get access to server2, then we need to made him member of group2, yes?