****VPN USERS AUTH. THROUGH RSA SECURID***

[Jean Paul Enerst]

Hi Gents,

I need your genius ideas to complete a simple task here...

I have a remote access VPN through an ASA 5510 with RSA auth. Manager which works fine. The only issue is now i want to control users access. At the moment, a user can authenticate more than once which i don't want as the users are sharing their token generated password. I'd like to restrict authentication to one user at a time.

For instance if user A has been authentication. He/She should not be allowed to access the VPN again with another device in another location...

So my question is can that be done in the ASA config or in RSA auth. Manager as RSA does/control the authentication process?

Thanks,

[Rahul Govindan · Accepted solution]

You should be able to set "vpn-simultaneous-login" value to 1 on the ASA group policy to restrict a user to only 1 session.

More information in the ASA command reference here:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/T-Z/cmdref4/v.html