[VPN] Securing Remote Access to a Cisco VPN 3000 Series Concentrator

[Lonny Schwartz]

I'm setting up a Cisco VPN 3000 Series Concentrator. I'm using Radius for
user authentication. One of my security concerns is that our SE's like to
pass along VPN software amongst each other and if they know the group
password then any can login.
I'm trying to avoid using the internal DB. Unfortunately I'm coming from a
Netscreen Global Pro mentality where users can login, but if they aren't
assigned a group they don't get any VPN policy.

Any ideas are appreciated!

Lonny