access restrict

[Shibu1978]

Hi,

1) ASA 5520 is configured with Remote Access VPN (cisco VPN client 5.0) using RADIUS authentication(Windows 2008- NPS). following are the VPN profile created in ASA  for official use.

a) admin

b) Vendor-A

c) Vendor-B

d) Vendor-C      e.t.c

Issue here is any RADIUS user can login to all the above profiles & get access to the access configured with their lanpools to internal resources.

Is there any we can restrict a RADIUS user to a specific profile ?  say Admin profile  is only be accessed to specific user or group from AD?

Any help would be appreciated.

Thanks

[Marcin Latosiewicz]

This was discussed multiple times. Check group-lock functionality and available RADIUS attributes for your ASA version.

[Shibu1978]

Thanks for your reply.

we have 8.2(5) version on the ASA.

Could you please get me a  link which specify this ?  

thanks

[Shibu1978]

Could you please someone shed some light on this?

thanks