Is there any way, or has anyone had any luck coming up with a working solution with the current verison of FTD for dynamic access policies on VPN Anyconnect clients using FTD firewalls? Can you use a DACL with ISE or a Radius server? Can you use LDAP group membership to determine which ACL will apply to you? FTD is being sold as a drop in ASA replacement but as a field engineer who implements these I am not seeing a workable workaround for this that can keep a single URL and determine access list by user name as you could with at DAP. If anyone has a suggestion for a method to work around this using FTD it would be appreciated. Its a critical function of remote acess. Thanks!
