Pix 515 & ACS v3.1 mapping to AD windows groups.
Need to Authenticate and Authorize groups to various websites on the internet. For instance groupA has access only to cisco.com while groupB has access to everything. Have successfully done this but upper management want's this transparent to the user by tying into the windows login somewhat how NTLM authentication works. Have explored using ACNS as a solution as it does support NTLM but the authorization is only to permit/deny windows groups from having internet access or not. It doesn't support the granularity of what they can access as far as I can tell.
Is there a solution Cisco recommends for transparent authentication or is there something that can still be done with ACS?
Thanks,
Tom
