I’m looking to centralize all of the VPN account (AnyConnect / SSLVPN) via our Active Directory via IAS on the Domain Controller. I would like to set up AD groups, based on security levels, and map those to the Cisco ASA group policy. Furthermore, I would like to assign an IP Address Pool based on the group.
For example:
Active Directory (Group): Security Level 1
CiscoASA Group Policy: Security Level 1
IP Address Pool: 192.168.1.1 – 192.168.1.10
Active Directory (Group): Security Level 2
CiscoASA Group Policy: Security Level 2
IP Address Pool: 192.168.2.1 – 192.168.2.10
Active Directory (Group): Security Level 3
CiscoASA Group Policy: Security Level 3
IP Address Pool: 192.168.3.1 – 192.168.3.10
