We have two domain controllers, one authenticates users through the VPN with IIS. We'd like to give our VPN to a user who is going to only be using one single webapp, on one of the domain controllers. We don't want her to have any other "inside" access.
Can I instruct our PIX to only allow packets to the domain controller where she has official business?
http://www.cisco.com/en/US/products/sw/secursw/ps5338/products_configuration_guide_chapter09186a00801fd703.html#wp391230