Microsoft AD security groups and ASA 5510

[hdoan]

I have a web server on the inside and would like to allow only AD users or computers to access this web server from the Internet.  Is there a way I can tie AD security groups to an ASA access rule?

Thanks,

hdoan

[Francesco Molino]

Hi

yes you can do it. It's called IDFW (Identity Firewall). You need minimum 8.4.2 code and not supported on Windows 2003 R2.

You need to have access to Windows AD server as you have to install an agent.

Here is a great and simple post:

https://supportforums.cisco.com/document/80646/asa-idfw-identity-firewall-step-step-configuration

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your question