Dear All

I have a query regarding Cisco Remote VPN Users who are connecting to ASA box where i have created VPN groups (and IP Pool)and ACL are created and assigned to those groups .However for authentication , i have configured that group for TACACS (Cisco ACS) Authn.My query is two particular users should not access each others resources being in same grp.In the VPN Group created in ASA they will have same ACL assigned ; however they can access each other resources if they know each others password(consider that ACL is for RDP to 2 servers A and B, one should access only A , other should access only B .If they know each others IP Address and in case they know RDP user credentials also , the security is breached ) .Hence in this case can we assign ACL for individual users created in ACS ?

Regards

Ankur Sachdev