We have an ASA 5515 running 9.9(1) providing VPN connectivity only. Remote users are first authenticated via an external RSA service, then a secondary check to our own Microsoft DC's is performed to assign the correct Group-Policy through the use o...