With local user auth you can also define users to exclude them from access to the vpn or to ssh on the asa itself.
Sent via BlackBerry from T-Mobile -----Original Message----- From: Ryan West <[email protected]> Sender: [email protected] Date: Tue, 11 Jan 2011 12:34:54 To: dalton<[email protected]>; [email protected]<[email protected]> Subject: Re: [c-nsp] ASA ssl webvpn question dalton wrote: > Hi all, > I am in the process of reading through docs etc on this, but was > hoping someone maybe has done this before and can give me a quick answer. > > I have an ASA running ssl vpn as well as normal remote access (cisco client > based). > What I am trying to do is exclude 1 particular user from using the ssl vpn. > > Is there a way to do this via tunnel-group or group-policy? > > Thanks for any insight. It depends on where your user database is. You can assign group-policy membership on the ASA for each user, via RADIUS attributes, or through an LDAP dig. You can use DAP to combine the responses as well. Each group policy can have specific vpn-tunnel-protocols assigned to it. -ryan _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
