Hi,
Does anyone have AnyConnect on Firepower (FMC) using AD (rather than RADIUS) while having access control via security groups? With RADIUS this could be done as NPS policy conditions. Currently if you use AD authentication it will let anyone with an AD account in via VPN. I currently run in via RADIUS. If I switch Authentication to AD and keep Authorisation as RADIUS with "Allow connection only if user exists in authorization database" it will fail the login even if the conditions are met if it was 100% RADIUS.
