FTD Remote Access VPN: Attach Users to Different Group Policies Based on AD Group

[pannkakan_1]

Hi

I configured the RA-VPN via the FMC configuration tool and now I need to seperate Sales from Marketing. At the moment I did a Identity policy and an access policy blocking Sales from reaching Marketing Servers and vice versa. It seems to work but both VPN users get each others network from the split tunneling ACL even though they cant reach them. I was looking for LDAP Attribute Map but it doesnt seem to be possible in this version of FMC/FTD. (6.2.3)

Any other way to solve this?

[Rahul Govindan · Accepted solution]

LDAP attribute maps are not available on the FTD as of yet. You would have to use a Radius server such as ISE or Microsoft NPS to assign them to different group-policies. This way different groups can receive different split-tunnels, Filters etc.