topic Disabling webvpn removes proxy-bypass settings. in Network Security

Disabling webvpn removes proxy-bypass settings.

johnlloyd_13 — Mon, 29 Jun 2020 01:39:51 GMT

hi,

i disabled anyconnect/webvpn on an ASA FW since it's not being used and to help reduce the vulnerability on the FW.

i got a warning prompt below and was wondering if this is normal? my google search is failing me and i want to know what does it mean? any other webvpn setting that was changed?

can i safely do a 'write mem'?

ciscoasa/pri/act# conf t
ciscoasa/pri/act(config)# webvpn
ciscoasa/pri/act(config-webvpn)# no enable OUTSIDE
WARNING: Disabling webvpn removes proxy-bypass settings.
Do not overwrite the configuration file if you want to keep existing proxy-bypass commands.
INFO: WebVPN and DTLS are disabled on 'OUTSIDE'.

Re: Disabling webvpn removes proxy-bypass settings.

Francesco Molino — Mon, 29 Jun 2020 03:43:34 GMT

Hi

If you're not publishing any web application where you require an authentication to allow access you can do a we memory.
It's part of the webvpn feature to publish these applications instead of forcing a full vpn toi allow users to access it. Today we use more often smart tunnel from anyconnect.

Re: Disabling webvpn removes proxy-bypass settings.

johnlloyd_13 — Tue, 30 Jun 2020 00:32:52 GMT

hi francesco,

thanks! so far no one complained about anyconnect.

do i just issue a 'no webvpn' to remove all its config?