ASA 5520 question

[rzulueta315]

I have a group of consultants that need VPN access. I would like to keep them seperate form the corporate VPN users and restrict their acces to an internal Sharepoint site only for starters. Should I create a new group? And how can I create this very specific VPN access in the concentrator.

[rzulueta315]

I meant to edit this .... I am using a VPN 3000 concentrator not ASA5520. Sorry for the confusion.

[Richard Burts]

I believe that most of the answer is the same whether the platform is ASA5520 or C3000. I would suggest configuring a separate group for the consultants. With a separate group for the consultants you can also configure a separate address pool to use for them. And with a separate address pool used only by the consultants you can then configure access controls on the router and switches of your network to limit the access of the consultants to the SharePoint or whatever you want them to be able to access.

HTH

Rick