Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Any way to have a user be a member of 2 SSL VPNs when using ACS?

Hello all, I have an ASA that authenticates with Active Directory and an ACS. So I build the SSL VPN on the ASA, put the user in a group in AD, then tie the two together using ACS. My problem is that some members need to be in two different SSL groups but since I have the user "locked" in the group in the ACS I don't know if there is a way around it. Example is many Physicians in the community use our Physician Portal page (ASA), a few employed Physicians have the need to VPN into their desktop. I don't want to add their workstation to the Portal ACL as it would be opened up to all Portal users, some who are not employees. Any suggestions would be appreciated. Thanks Paul