Use Active directory groups for allow internet to clients

[erwee1973]

Hello,

Can anyone tell me whether it is possible to create a Windows Active Directory group of users which I can use to permit access through the ASA (5520) firewall? I only can find vpn authentication with Radius but nog specific information about granting AD groups internet access via the ASA.

Thank you and regards,

Ralph Willemsen

Arnhem, Netherlands

[mirober2 · Accepted solution]

Hi Ralph,

This is possible in the latest 8.4 software on the ASA with the combination of the AD Agent software that you run on a server in your domain. This guide lists the step-by-step configuration procedure:

https://supportforums.cisco.com/docs/DOC-20366

-Mike