ANYCONNECT VPN user account lock

[Yuan Li]

when the anyconnect VPN user's account is locked, Is it possible to unlock automatically? or the VPN access request is rejected ?

[balaji.bandi]

How is your user authenticated against what mode ?

[Yuan Li]

local authenticate. we have no AAA server. we want to know when the anyconnect VPN user's account is locked, Is it possible to unlock automatically? or the VPN access request is rejected ?

[balaji.bandi]

Most of my environment use ISE/ AD so we can control that.

But your Local database, should be set like below config ( i have not tried it - i guess it should work)

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/112967-acs-aaa-tacacs-00.html

[Yuan Li]

THANK YOU