LDAP User based Access rules/blocking of URL

[pankaj.bandewar]

Hello Experts,

Is it possible to allow/deny access to certain web sites/categories to a specific users/user groups from LDAP server (imported in firepower)..?

also to this how to user based policy not as per the zones/netowrks/subnets etc..?

also kindly share any links how to configure the same..

[Marvin Rhoads]

Sure - this is absolutely possible. There is a great series of free videos at labminutes.com that walks you through this step-by-step. See the listing here:

http://labminutes.com/video/sec/ASA%20FirePower

Specifically, see this one section - from about 5:00 onwards:

SEC0227 - ASA Firepower 6.0 Passive and Active Authentication (Part 2)

http://labminutes.com/sec0227_asa_firepower_60_passive_active_authentication_2

[pankaj.bandewar]

Thank you sir, it does resolve my query.