Cisco Any Connect Dynamic policy LDAP options missing

[Richard Tapp]

We have just upgraded 2 different models of Firewalls, both are on different versions and I have noticed that the LDAP option in the dynamic policy is now misisng options.

In the top left box (select criteara) in Dynamic policies, you have the option to use LDAP. We normally add groups in this for an extra layer of security.

I tried to add a new AC profile today and when I got to the LDAP option the box is mostly blank ( see attached image ) Normally you can choose AD groups at this point

Lucikly all our old profiles still have thier LDAP entries and it does not look like you can add this under CLI.

Any one else come across this issue ?

[balaji.bandi]

what models what version of ASA code ? both having same issue ?

[Rob Ingram]

@Richard Tapp this is probably an ASDM bug, what version are you running?

Look like the same problem as identified here:- https://community.cisco.com/t5/vpn/i-can-t-add-aaa-attribute-type-ldap/td-p/4583301

Resolved by using a different ASDM version.

[Richard Tapp]

Thanks Rob, we are on 7.17(1)  I will get it changed