Cisco Anyconnect - adding filters based on login

[dpatkins]

I have two sets of local users who access internal networks vai the Anyconnect application on a Cisco ASA 5505.

One user needs to access 1 ip address while about 7 users access abotu 4 addresses.

I have a group called xyz1 which currently has the one user in the connection profile.  I guess to reaffirm my thought, If I create another connection entry called xyz2, can I assign the other 7 or 8 users to it?

If I can do this, how can I ensure that each connection entry only has access to specific IP addresses on the internal network?

Thank you..

Dwane

[Javier Portuguez]

Hi,

You could use DAP rules and apply a network ACL according to each one, this ACL acts as a filter which basically allows access to specific networks and by default drops any other traffic.

I am sorry for not being able to provide with the steps, but I am not in the office.

Thanks.

Portu.

Please rate any helpful posts

Sent from Cisco Technical Support Android App