Hiding Group or Lock Group to a Particular Client in Anyconnect.

[dhaneshbhaskaran]

Hi Team,

I  am running three Anyconnect Groups for three different clients,We have been reciveing complaints about the clients being able to see all the groups of each other and also are able to login using there credentials regardless of the group.

Currently iam using ASA Local Auth.Concerns are below

1) Can i hide the groups

2) Can i limit the access to only concerned groups

Thanks.

DB

[Marcin Latosiewicz]

Check out group-alias, group-url and group-lock features. 

You can provide group-specific URL for each group, check also how group-alias affects group availability.

Finally group-lock locks users to particular group. 

Some reading:

http://www.cisco.com/c/en/us/support/docs/security/ios-easy-vpn/117634-configure-asa-00.html

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98580-enable-group-dropdown.html