Local anyconnect group to specific split tunnelling

[yvonne-tsara]

Good day

I have sent up Anyconnect remote access vpns which are being authenticated through an AD for Duo MFA. Previously using local AAA, would lock users to a specific group. How can I achieve the same when the users are now connecting from AD.

Regards

[Kasun Bandara]

@yvonne-tsara hi, check this guide. HTH

https://duo.com/docs/cisco

[Marvin Rhoads]

@yvonne-tsara you can use the LDAP attribute-map feature. It applies to both ASA and FTD-based remote access VPNs.

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91831-mappingsvctovpn.html#toc-hId--69595584