How to provide secure access to vendor

Unanswered Question
Mar 14th, 2008
User Badges:

Good afternoon,

We need to provide a vendor access to a server located on the inside of the network (MS SQL Server). I have a couple questions along these lines:

1. We currently allow vpn access to IT staff on our ASA 5510 (which is privately managed). We currently have one authentication group for our IT staff. Is there a way to have two authentication groups? We're using a MS radius server to authenticate before access is approved.

2. Once the vendor is connected, what would be the best way to restrict them to only the one box?

Our concern is that they would be able to launch telnet, file share, etc...I realize this may be best handled by MS group, but was thinking about access lists..

Any thoughts would be appreciated.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
acomiskey Fri, 03/14/2008 - 11:41
User Badges:
  • Green, 3000 points or more

The easiest way would be to create a second remote access tunnel group. Create a new ip pool for that group and apply it to a new policy for that group. You could then limit the access by being very specific with your nat exemption acl.


This Discussion