About Rob Ingram

Rob Ingram · 03-03-2024

Any ThousandEyes training or certifications planned?

Rob Ingram · 12-19-2025

@zachartl you can certainly share the same connection profile/tunnel-group. You can use authorisation via LDAP/RADIUS to dynamically assign group-policy, access-list or split-tunneling settings based on AD group membership.

Rob Ingram · 12-19-2025

@s_SiD_s use the same policy set for all VPN connections, but create multiple authorisation rules (not authentication) and define the AD Group as one of the conditions. If you are still having issues provide a screenshot of your authorisation rules.

Rob Ingram · 12-18-2025

@knanyhy011 use a loopback instead of statically assigning the IP address to the virtual-template, as directly assigning a static IP address and subnet mask to a Virtual Template Interface is not supported. https://www.cisco.com/c/en/us/td/docs/route...

Rob Ingram · 12-17-2025

@sahdogra I am aware of what you are trying to achieve. When you define the protected networks you define your source "10.0.0.0" and the remote protected network "192.168.0.0", traffic from 10.0.0.0 not going to 192.168.0.0 will not be encrypted and ...

Rob Ingram · 12-17-2025

@sahdogra Example https://www.cisco.com/c/en/us/td/docs/security/asa/asa924/configuration/vpn/asa-924-vpn-config/vpn-site2site.html#ID-2445-000001fe on FTD it's referred to as "Protected Network" which represents the networks to be encrypted. If the...

Member Since	‎12-05-2010 06:35 AM
Date Last Visited	‎10-16-2025 09:27 AM
Posts	11,024
Total Helpful Votes Received	17338

User Statistics

User Activity

Any ThousandEyes training or certifications planned?

Re: VPN Default Group Policy Differences ASA versus FTD.

Re: ISE 3.3 + ASA anyconnect + 2FA

Re: FlexVPN Spoke-to-Spoke Implementation with IKEv2 Routing

Re: Routing on Site to Site Policy Base VPN

Re: Routing on Site to Site Policy Base VPN