Restricting user(s) access to IP /Protocol via PIX VPN and Windows Server 2003 RADIUS Server
Posted on 2006-04-10
500 points up for this one :)
Hey all, I have sifted through pages of related answers to my question before posting and cannot find anything definitive to answer question, so here's mine, hoping others are in the same predicament:
I am running Cisco PIX 515 with 2 windows 2003 standard servers running as RADIUS servers. Currently, the only users able to use VPN are IT staff, who are given full access to the network. The requirement of low-level users needing email only access has arisen, and for obvious reasons we wish to segregate their traffic to only the systems required. MS Routing and Remote access is not being used, so I am unable to implement a filter on this end. This leaves me to applying an ACL on the PIX to those users only, could someone help me out in this area, or is there an easier way that I am overlooking?
Many, many thanks!