Split tunnel in specific groups

[kostasthedelegate]

Hello, 

I have an ASA system and I use RA VPN with AnyConnect. 

There are several AD groups that connect. 

Is it possible in some groups to enable split tunnel, while in others no?

Thanks in advance, 

Konstantinos

[Rob Ingram]

Hi,

If you authenticate and authorise the users against LDAP or RADIUS, depending on which AD group the user is a member of, you would assign them to a specific ASA group-policy. The group-policies could be configured differently with or without split-tunneling configured.

Example of LDAP configuration

Examples of RADIUS configuration:-

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/117641-config-asa-00.html

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98634-asa-ldap-group-pol.html

HTH