ASA VPN - Authorize User Based on LDAP Group

[marcio.tormente]

Hello Friends

I need create a configuration to authorize login base on LDAP Group.

I´m not specialize in Firewall and I tryed to follow the links above, but both seems to old, many commanda is not available.

http://www.tunnelsup.com/cisco-asa-vpn-authorize-user-based-on-ldap-group

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91831-mappingsvctovpn.html

Anyone knows how can I do it?

Thanks

Marcio 

[Philip D'Ath · Accepted solution]

I like using the DAP (Dynamic Access Policies) to control this.  Following this guide:

https://supportforums.cisco.com/document/7691/asa-8x-dynamic-access-policies-dap-deployment-guide

[marcio.tormente]

I made the configuration using DAP, first didnt work, but the problem wasn´t the configuration on ASA, but the time to replication on Microsoft Server.

Thanks