Hi, We are considering to replace Juniper SA SSL-VPN device with Cisco ASA, one essential functionality we are using on Juniper SA is that it has the capbility to map users' AD group association to a VLAN, i.e. when a user logs in, SSL VPN server will do "role-mapping" find out which VLAN this user is in, and allocate tunnel IP address for that VLAN from center DHCP server, this way user access privilege can be configured on the same gateway router interface which is shared by wifi and wired-connection access (through dot1x). I looked ASA configuration guide, ASA does not seem to have this similar functionality as Juniper SA series, is this doable in ASA?
