topic Re: remote access community and AD groups in SASE and Remote Access

remote access community and AD groups

Daniel_Kavan — Tue, 21 Mar 2023 18:08:37 GMT

Has anyone found a way to bring in AD groups to the remote access community for IPSEC/Endpoint Connect access. SSLVPN works fine, but users need to be in the remote access community and I can only add local users/groups to the Remote Access community.

Re: remote access community and AD groups

the_rock — Tue, 21 Mar 2023 18:28:40 GMT

Are you trying to add access role group to it?

Re: remote access community and AD groups

Daniel_Kavan — Tue, 21 Mar 2023 18:33:31 GMT

I tried, but it doesn't see any of my role based groups, just local groups.

I'm trying to add Participant User Groups.

Re: remote access community and AD groups

Daniel_Kavan — Tue, 21 Mar 2023 18:37:08 GMT

I was able to just add a ldap group that might be what I need.

Re: remote access community and AD groups

the_rock — Tue, 21 Mar 2023 18:42:39 GMT

I could have sworn there was a way to actually add access role, let me confirm in my lab.

Andy

Re: remote access community and AD groups

Daniel_Kavan — Tue, 21 Mar 2023 18:56:56 GMT

the ldap group worked ! So I'm happy. Thanks Andy.

Re: remote access community and AD groups

the_rock — Tue, 21 Mar 2023 19:21:18 GMT

I cant find a way to add access role, so it might not be possible, but yes, ldap group works, since its technically consider internal group.