Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

excuse me if my terminology is not correct.

We are using WebVPN to VPN into an Cisco ASA 5520. We want to have different rules that allow the user that VPNs into the network to access certain things based on their RSA SecurID authentication userid. Is this possible? If so, are there some good examples of how to achieve this?

share|improve this question

I believe that you would put certain users into groups and then allow those groups access to certain things. Sorry can't be more specific but haven't actually done it yet. I'm reading anything on asa's at the moment as we are getting them in 2 months in our datacenter for edge firewalls.

share|improve this answer

The ASA does support the functionality using the Identity based ACLs. In this case the ACLs are based on the mapped attributes such as the user ID as you described.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.