Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

How to provide secure access to vendor

Good afternoon,

We need to provide a vendor access to a server located on the inside of the network (MS SQL Server). I have a couple questions along these lines:

1. We currently allow vpn access to IT staff on our ASA 5510 (which is privately managed). We currently have one authentication group for our IT staff. Is there a way to have two authentication groups? We're using a MS radius server to authenticate before access is approved.

2. Once the vendor is connected, what would be the best way to restrict them to only the one box?

Our concern is that they would be able to launch telnet, file share, etc...I realize this may be best handled by MS group, but was thinking about access lists..

Any thoughts would be appreciated.

3 REPLIES
Green

Re: How to provide secure access to vendor

The easiest way would be to create a second remote access tunnel group. Create a new ip pool for that group and apply it to a new policy for that group. You could then limit the access by being very specific with your nat exemption acl.

Community Member

Re: How to provide secure access to vendor

Thanks for the quick response!

Green

Re: How to provide secure access to vendor

157
Views
0
Helpful
3
Replies
CreatePlease to create content