ASA authentication using Windows Active directory

[alanajjar]

Hi,

If we want to authenticate users through ASA, and we want to use the accounts from windows active directory, how can we do that.

thanks in advance.

[russ]

Assuming you are referring to VPN users, you can install IAS on a Windows DC and then configure xuth of VPN clients against a radius server:

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_configuration_example09186a00806de37e.shtml

[alanajjar]

Hi,

Thank you for your response, it is a good reference. I wonder if we also can use IAS for non VPN authentication, like cut-through proxy,for example :

pix(config)# aaa authentication match list1 inside aaa-tag

where :

list1 define hosts and services to be authenticated.

aaa-tag is the IAS server

Thanks again