11-19-2018 02:31 AM - edited 02-21-2020 08:29 AM
HI,
I have two Anyconnect Profile one for Sales user and one for admin. How to restrict Sales user to login in to Admin user Connection profile.
In ASA i was doing it with Radius attributes and DAP policy, but how to do it in FTD.
Solved! Go to Solution.
11-19-2018 07:21 AM
Hi Piyush_Sharma,
You can try setting up radius mapping with attribute 25 on the NPS, the following guide includes exactly what you need to do from the server perspective since there is nothing you need to do on the FTD:
If the group-policy needs to be assigned to the user dynamically with the NPS RADIUS server, the group-policy RADIUS attribute (attribute 25) can be used.
Complete these steps in order to send the RADIUS attribute 25 for dynamic assignment of a group-policy to the user.
Hope this info helps!!
Rate if helps you!!
-JP-
11-19-2018 07:21 AM
Hi Piyush_Sharma,
You can try setting up radius mapping with attribute 25 on the NPS, the following guide includes exactly what you need to do from the server perspective since there is nothing you need to do on the FTD:
If the group-policy needs to be assigned to the user dynamically with the NPS RADIUS server, the group-policy RADIUS attribute (attribute 25) can be used.
Complete these steps in order to send the RADIUS attribute 25 for dynamic assignment of a group-policy to the user.
Hope this info helps!!
Rate if helps you!!
-JP-
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide