Ok, I read over the brief docs in the 4.7 about AD, but how do you get AD groups (OU's) to match "groups" internal to the Vpn 3005?
It is as simple as naming the AD group (CiscoCorpSslvpn) and the group on the Vpn 3005 the same thing? please provide links to info out there I might have missed about how to do this. Dont' want to just "verify" a single person in an OU.
I want several groups with different levels of websslvpn security.
Have seen the tech note about searching OU's for a single user, no mention on how to get OU groups to apply to internal Vpn3000 groups.
I realize these groups on the Vpn 3000 probably won't contain any actual users. That is how the ACS does it. No, I don't want to use ACS to auth for this Vpn 3005.