topic Re: ASA, Radius and Auth Proxy/Pass-thru in Network Security

ASA, Radius and Auth Proxy/Pass-thru

sloeckle — Fri, 21 Feb 2020 08:32:05 GMT

Hi Everyone,

I have my ASA5520 setup with radius auth on webvpn and everything is working great, even group assignment with the radius class OU=group1; etc...

I need to go a step further with this. I want users to not have to reenter the same userid and password for websites behind the asa and webvpn. I need to be able to pass this authentication to websites within webvpn whether it's owa or apache when the userid and password are the same. I cannot find any documentation on auth passthru/proxy concerning webvpn.

Thanks for your help!

Stephen

Re: ASA, Radius and Auth Proxy/Pass-thru

thomas.chen — Wed, 23 Nov 2005 18:22:16 GMT

The authentication proxy feature allows users to log in to a network or access the Internet via HTTP, with their specific access profiles automatically retrieved and applied from a TACACS+ or RADIUS server. The user profiles are active only when there is active traffic from the authenticated users.

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a008017b2a4.shtml

Re: ASA, Radius and Auth Proxy/Pass-thru

sloeckle — Wed, 23 Nov 2005 20:55:38 GMT

Well, first of all we're using an ASA5520 and second, we're using WebVPN not a VPN client.

Stephen

Re: ASA, Radius and Auth Proxy/Pass-thru

litouch — Fri, 07 Jul 2006 23:16:22 GMT

Stephen,

Did you try "Auto Signon" and "SSO Servers"?

Actually I have a ASA, and "Auto Signon" is enabled. And it can work well. Wish this can help you.

BTW, did you test the Raiuds authorization? I am wondering why I can not use radius av-pair with ASA....