topic Re: VPN config on CDO in Network Security

VPN config on CDO

kostasthedelegate — Tue, 02 Feb 2021 10:57:05 GMT

Hello,

I have CDO and I have imported an ASA configuration without any physical device.

I see that the policies and the objects are OK. But the VPN configuration is not present.

Is it necessary to have a physical device for the VPN config to be imported?

Thanks and regards,

Konstantinos

Re: VPN config on CDO

Rob Ingram — Tue, 02 Feb 2021 11:11:49 GMT

Hi @kostasthedelegate

CDO appears to only support tunnel management on ASA currently, so I wouldn't expect you to import the VPN configuration.

What types of Virtual Private Network are currently supported with CDO?

For ASA customers, CDO supports IPsec Site-to-Site VPN tunnel management only.

https://docs.defenseorchestrator.com/Frequently_Asked_Questions_FAQ

Re: VPN config on CDO

Marvin Rhoads — Tue, 02 Feb 2021 15:15:03 GMT

CDO, being entirely API-driven, is limited by what's supported on the managed device type via API. So for ASA it doesn't include remote access VPN. For FTD, it does include them.

The raw configuration is still there however - select the device and look on the right side under Management > Configuration.

Re: VPN config on CDO

kostasthedelegate — Tue, 02 Feb 2021 16:26:00 GMT

Yes Marvin great! It is there.

So If I assign a physical device the configuration will ne written there, right?

Will the users be able to connect?