Anyconnect permission with NT Domain user

[Stephane Richard]

Hi,

I am trying to setup a VPN with AnyConnect on my ASA5510 and it works fine.  I have setup an AAA server group for my Active Directory with the "NT Domain" protocol".  Right now, every user is able to connect with their Active Directory credentials.  I would like to restrict access to the Anyconnect VPN to only a few users in AD.

Is there a way to do this?

Thank you

[Herbert Baerten]

Hi Stephane,

this is most easily done by switching from NT authentication to LDAP, and implementing the solution in this document:

hth

Herbert