We're using Cisco AnyConnect Essentials with radius authentication against Active Directory and it is working fine. Right now, a user has to be in an Active Directory group VPN in order for the Radius ...
So I found this page, which indicates that the policy attribute 'group-lock' is used to limit a vpn group-policy so that valid users can only login to groups to which the radius server says they ...