We have a VPN 3030 authenticating to CSACS 3.1. I read somewhere that 3.1 allows you to put a per-user access list in the user profile on ACS, without having to put any filters on the VPN 3000. I would like to do this, but have been unable to find any documentation on it. Can anyone explain how to do this, or at least point me in the right direction? Thanks!