ASA Direct Authentication - HTTPS

malikyounas — Tue, 12 Mar 2019 09:08:42 GMT

I have followed the guide on the link below to configure direct authentication on ASA. HTTP part of it works fine but HTTPS doesn't.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113363-asa-cut-through-config-00.html

As per guide the configuration quite simple to achieve and works OK for HTTP. However, as soon as I replace HTTP with HTTPs, the web page shows a certificate error which I ignore but doesn't load anything afterwards and just keeps waiting. Any idea how to get it working?

interface Ethernet0
nameif inside
security-level 100
ip address 20.20.20.2 255.255.255.252
!
interface Ethernet1
nameif outside
security-level 0
ip address 10.10.10.55 255.255.255.0
!
access-list inside extended permit ip any any
access-list outside extended permit ip any any
access-list authmatch extended permit tcp any host 10.10.10.55 eq 5555
access-group inside in interface inside
access-group outside in interface outside
user-identity default-domain LOCAL
aaa authentication match authmatch outside LOCAL

aaa authentication listener http outside port 5555
http server enable
http 10.10.10.0 255.255.255.0 outside

Re: ASA Direct Authentication - HTTPS

flos.jiri — Wed, 23 Jan 2019 12:41:09 GMT

Try this add:

"aaa authentication listener https outside port 5555"

topic ASA Direct Authentication - HTTPS in Network Security

ASA Direct Authentication - HTTPS

Re: ASA Direct Authentication - HTTPS