| Message Code | PIX-3-713060 |
| Severity | Error |
| Description | Tunnel Rejected: User (user) not member of group (group_name), group-lock check failed. |
| Explanation | This message indicates that the user is configured for a different group than what was sent in the IPSec negotiation. |
| User Action | If you are using the Cisco VPN client and preshared keys, make sure that the group configured on the client is the same as the group associated with the user on the Cisco ASA . If using digital certificates, the group is dictated either by the OU field of the certificate or the user will default to the remote access default group. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.