A client of mine is looking at controlling user access to the Internet based on identity. I know Microsoft ISA and other proxy solutions would do.
However, I am looking at leveraging their present installation of ASA and Microsoft AD to provide them with this function.
I know for sure that the ASA can be used to authenticate users on a web page against the AD and apply access rules accordingly (Identity-Based Access).
Unfortunately, I dont seem to be getting much info on the setup and configuration of this requirement.
If anyone knows of any source, please let me have the links. (I am not referring to authenticating telnet/ssh sessions on the ASA against AD tho).