LDAP

[Rafael Jimenez]

I want to know if its possible implement a firewall (ASA) to deny or permit traffic against MS Active Directory users and groups (using ldap).

For example allow http only to specific members of an MS Active Directory group.

Thanks.

[Ivan Martinon · Accepted solution]

You can implement this with DAP (dynamic Access Policy) for cut through proxy and LDAP authenticaiton, using the memberOf attribute