We are unable to deny ASA admin functions to users who have connected via VPN. In summary, any user that makes a remote VPN connection to our ASA is able to start up ASDM and/or the https java applet regardless of the privileges set. This, in our o...