Issues with anyconnect and ldap

[TylerMickinkle6426]

Hey guys,

I'm having an issue with configuring Anyconnect. I am currently trying to give permissions to Anyconnect using security groups in AD. The issue is that any user with an AD account can currently login to Anyconnect.

I have created an LDAP attribute map looking at memberOf and assigning a group policy within the ASA. When I check the VPN connection in ASDM it shows that everything has been assigned correctly but it's obviously not working. I'm at a loss on where I should start looking. Any thoughts?

Thank you in advance.

[Rob Ingram]

Hi,

Can you provide a sanitised copy of your configuration for review?

Here are some AnyConnect/LDAP configuration examples which might provide some help.

http://www.labminutes.com/sec0126_ssl_vpn_anyconnect_client_ldap_attribute_mapping

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91831-mappingsvctovpn.html