VPN for domain computers only

[Lakeram Harrypersaud]

Hi Guys,

We just bought a Cisco ASA5516 which runs version 9x and only supports Anyconnect VPN. Is it possible to setup the anyconnect VPN to only support domain computers and non domain computers should not be able to connect to the VPN?

Any help will be greatly appreciated.

Thanks,

Lake

[rvarelac · Accepted solution]

Hi Lakeram , 

Yes , you can use the DAP feature to filter who can and who can't connect to the VPN.. You can use multiple attributes , eg.  MAC address , antivirus , registry keys , OS ,  etc. 

Check examples below.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/108000-dap-deploy-guide.html

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/asdm64/configuration_guide/asdm_64_config/vpn_asdm_dap.pdf

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115947-dap-adv-functions-00.html

Hope it helps

-Randy-

[Lakeram Harrypersaud]

Thank you very much.

Much appreciated.

Regards,

Lake