Solved

I need to disable a user from web vpn on a cisco 5510

Posted on 2008-10-27
6
418 Views
Last Modified: 2012-06-27
I am using a Cisco 5510 firewall and have it configured for web vpn. I have it authenticating against my active directory and was wondering how to block a few individuals. I don't want to make a whole new access list, just block 2 names from the active directory. These users do not have static IP's and can access the web via anywhere.  I am not used to CLI , but am handy with asdm. Any ideas?
0
Comment
Question by:dennisjameshoward
6 Comments
 
LVL 32

Accepted Solution

by:
harbor235 earned 500 total points
ID: 22813317


disable the user via active diretory, that way they cannot authenticate and access will be restricted

harbor235 ;}
0
 
LVL 3

Expert Comment

by:Slawomir Malinowski
ID: 22813342
Active Directory Users and Computers > "user" properties > Dial-in tab > Remote Access Permision > Deny access > OK

or

remove this user from remote access group if you have one.
0
 

Author Comment

by:dennisjameshoward
ID: 22813379
They will be still allowed to use the network when in office, is there a setting to stop authenitcation with the asa?
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 32

Expert Comment

by:harbor235
ID: 22813460


You have defined a group policy for webvpn access, you have pointed authentication to the active directory.
If you authenticated users locally then you could do what you need, however, I do not believe you can disable the user because you have told it the active directory server is the authority fro user authentication.

Filtering the source IP may be the only way without reconfiguring webvpn to authenticate locally

harbor235 ;}
0
 
LVL 32

Expert Comment

by:harbor235
ID: 22813470
Can you post your sanitized config?

harbor235 ;}
0
 
LVL 2

Expert Comment

by:JimmyLarsson
ID: 22815424
Are you using IAS? In that case you can create a policy to deny VPN-access for members of a specific AD-group.

Br Jimmy
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
By pass website on ASA for Websense 4 73
Port Forwarding on Cisco 881 14 58
ISP Change 14 51
VPN between Juniper ssg140 (Static IP) to ASA 5500 (Dynamic IP) 23 23
Juniper VPN devices are a popular alternative to using Cisco products. Last year I needed to set up an international site-to-site VPN over the Internet, but the client had high security requirements -- FIPS 140. What and Why of FIPS 140 Federa…
Concerto Cloud Services, a provider of fully managed private, public and hybrid cloud solutions, announced today it was named to the 20 Coolest Cloud Infrastructure Vendors Of The 2017 Cloud  (http://www.concertocloud.com/about/in-the-news/2017/02/0…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question