ASA Local User Default Access Restrictions

[Dadriel]

Hi,

we are using local users on our ASA for remote VPN access and want to give them no further access on the ASA. Therefore we set their Access Restrictions to "No ASDM/CLI" as per our policy.

Unfortunately one of our admins recently forgot to change that setting and left it on the default setting of "Full access". To prevent such an issue occuring again in the future I would like to know if it is possible to set the default access restriction to "No ASDM/CLI" for a newly created user. This way we can't forget to set this setting anymore. 

[balaji.bandi]

if the VPN Pool is different from LAn, why not add access rule for the subnet not to access SSH/https to ASA IP address