Off domain computers

[nocret808]

Hello,

I need some assistance. i have a lot of VPN users that VPN in to my network. these VPN users uses our company laptops to VPN in to the network. However i am suspecting that some computers who VPN in to my network are off domain computers meaning computers that are not part of the domain. i have a ASA5500 and wanting to find out on how to filter these off domain computers. please help

[ggilbert]

Well - The ASA itself cant do any check as to what machine they are connecting with and so on or even the VPN client can be anything about it.

But I can guide you in the right direction.

You can do NAC - which will allow you to use Machine Authentication.

Here is the link on Cisco connection Online that will help out with some ideas on how to implement this.

http://www.cisco.com/en/US/netsol/ns617/networking_solutions_sub_solution_home.html

Hope this helps.

Thanks

Gilbert