ASA Anyconnect certificate authentication.

emilyforcisco1 — Tue, 12 Mar 2019 08:12:30 GMT

Working on switching our ASA from AAA authentication to Certificate based authentication, which I do have working. My one question is we have multiple profiles how do I map a certificate to a certain profile for anyconnect? Would the below article be the best way, by mapping it via the OU?

https://docs.secureauth.com/display/docs/Cisco+AnyConnect+Integration+with+Clientless+SSL+VPN

Hi emilyforcisco1,

JP Miranda Z — Wed, 31 Aug 2016 02:46:48 GMT

Hi emilyforcisco1,

The article is fine, at the end is not really necessary to do the mapping via the OU since you can actually select some other attributes, the specific steps for this on that article will be the "Create the Certificate to Profile Map".

You can also take a look to this Cisco documentation:

http://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/116111-11611-config-double-authen-00.html#anc16

You can ignore the AAA configuration and focus on the certificate mapping steps.

Hope this info helps!!

Rate if helps you!!

-JP-

topic ASA Anyconnect certificate authentication. in Network Security

ASA Anyconnect certificate authentication.

Hi emilyforcisco1,