Securing AnyConnect VPN user access via specific LDAP groups in Active Directory?

[rgordon-qsc]

Is there a brief tutorial on how to secure AnyConnect VPN access using Active Directoty security groups?

I have AAA LDAP authentication working on my ASA5510, to authenticate users against my internal AD 2008 R2 server, but the piece I'm missing is how to lock down access to AnyConnect users ONLY if they are a member of a specific Security Group (i.e. VPNUsers) within my AD schema.

[Jeff Van Houten]

This looks fairly complete

http://www.compressedmatter.com/guides/2010/8/19/cisco-asa-ldap-authentication-authorization-for-vpn-clients.html

Sent from Cisco Technical Support iPad App