Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm trying to force members of specific Active Directory groups to authenticate to different aaa-server groups. Is this possible to set up on a remote access ASA?Thanks very much for any help.
Hello,Is there a way to configure an ASA to dynamically assign different aaa-server groups based on AD group memberships of users trying to authenticate?I don't seem to see a way to do this using DAP, could this be done with LDAP mappings? Thanks in ...
Hello,We currently use anyconnect for remote access VPN through an ASA with an ACS RADIUS server configured as a server group. The ACS server uses RADIUS attributes to map users based on AD groups to local ip pools on the ASA.We recently installed an...
The authentication details page shows under "Other Attributes" an attribute called SelectedAuthenticationIdentityStores Is there a way I can create rules based on this attribute? I can't find it anywhere in the policy conditions options. Thanks in ad...
Hello,I need to incorporate two factor authentication to our current VPN AnyConnect/ASA/ISE environment. Currently, users are able to authenticate using AD or RSA credentials, however, I need to force certain users based on AD groups to ONLY authenti...
Thank you for the response.In my case I am dealing with two external identity sources (AD and RSA SecurID) to which some users can authenticate to both. I need to force certain AD groups to authenticate ONLY to the RSA SecurID identity source and dis...
I need to create an authorization condition that includes an external identity source. That does not appear to be an option so I want to add the SelectedAuthenticationIdentityStores attribute so I can create authorization conditions based on which id...
How will you use prime to monitor the UPS units? The only way I can see to view the traps is by adding a generic dashlet under detail dashboards which is a bit cumbersome. Is there another way in PI you can look at the SNMP info from the UPS? Thanks ...
I understand that I can sort through the Alarms & Events section in PI to see when devices have gone unreachable, but I want to know if PI can email notifications when a device becomes unreachable.I realize that I can go into Alarms & Events - Email ...
I solved my issue by running looking at the debug output on the 2811 router I was pushing the IOS (.bin file) to. I noticed that the TFTP traffic would simply stop without warning and seemingly for no reason. I gave up on the TFTP and had to configur...
