Restrict VPN users to certain Window servers.

[xuanhuymai]

Hi all,

Can I use CiscoSecure ACS to allow/deny VPN users access to a certain servers? I know that one could use CiscoSecure ACS to allow/deny VPN user to a group(s) of networking devices. But I have not been success with servers? Can you share some thought?

Thanks.

[aneelaka · Accepted solution]

Do you mean after user authenticates to VPN, you want to restrict which servers the users have

access to, if so you need to configure Downloadable ACL, so you can apply this ACL specific to your requirement.

Configuring DACL :

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/3.3/user/guide/c.html#wp696775

[xuanhuymai]

You are right aneelaka. Thank you!!!!!