topic Re: Hardcode a Cisco AnyConnect Profile drop-down option in Network Security

Hardcode a Cisco AnyConnect Profile drop-down option

johnlloyd_13 — Tue, 07 Jul 2020 09:47:49 GMT

hi,

i configured an ASA FW for anyconnect RA VPN with two VPN policies/profile: a group policy (and a tunnel-group) for FULL TUNNEL and another for SPLIT TUNNEL.

how do i "hardcode" to consistently display the FULL TUNNEL group/profile on the anyconnect pop-up/drop down option (when you login for username/password)?

Re: Hardcode a Cisco AnyConnect Profile drop-down option

Abheesh Kumar — Tue, 07 Jul 2020 09:49:17 GMT

Hi,

You can create single tunnel group and multiple group policy (for split tunnel and tunnel all) so that there will be only one tunnel displayed on Anyconnect or you can create groupurl's also.

HTH

Abheesh

Re: Hardcode a Cisco AnyConnect Profile drop-down option

johnlloyd_13 — Tue, 07 Jul 2020 10:08:52 GMT

hi abheesh,

thanks for your feedback! we need both FULL TUNNEL and SPLIT TUNNEL anyconnect option to be displayed for the users to choose from.

we just want the FULL TUNNEL to be consistently displayed as the first option. is there such option/command on the ASA?

Re: Hardcode a Cisco AnyConnect Profile drop-down option

johnlloyd_13 — Tue, 07 Jul 2020 11:06:31 GMT

it seem my issue was corrected by just re-configuring the split tunnel profile with no all caps.

i initially configured the tunnel-group profile (and alias) with text in ALL CAPS and it consistently showed as the first option in the anyconnect login pop-up.

Re: Hardcode a Cisco AnyConnect Profile drop-down option

Abheesh Kumar — Tue, 07 Jul 2020 12:18:40 GMT

Hope your issue was solved.

Re: Hardcode a Cisco AnyConnect Profile drop-down option

Marvin Rhoads — Tue, 07 Jul 2020 18:02:11 GMT

When I need to do this I simply prepend the tunnel-group names with a number. The dropdown list sorts numbers first. Something like:

1- FullTunnel

2 - SplitTunnel

Re: Hardcode a Cisco AnyConnect Profile drop-down option

johnlloyd_13 — Wed, 08 Jul 2020 00:41:15 GMT

hi marvin,

thanks for your feedback! is the tunnel-group (anyconnect profile) displayed alphabetically (top-down) or in the config order, i.e. the first policy configured is displayed first/on top on the drop down option.

also, i noticed the profile is "remembered" whenever re-login. how can i disable this? is it on the ASA or on client machine?

Re: Hardcode a Cisco AnyConnect Profile drop-down option

Marvin Rhoads — Wed, 08 Jul 2020 08:06:28 GMT

They are alphabetical top down.

The last used profile is stored locally on the client machine automatically. It can only be removed by deleting the client side file (and it will be recreated next time a connection is made so it's not very useful to delete it).