topic Cisco ASA5510 Clientless webportal problem in Network Security

Cisco ASA5510 Clientless webportal problem

danhed7400 — Mon, 11 Mar 2019 22:19:52 GMT

hi.

i have a strange problem.

i have Redundant ASA5510 setup (active/passive)

users have been using IPsec and SSL vpn for a long time without any problem.

now some users want to be able to access bookmarks and company data through the Web portal.

i have enabled Clientless SSL VPN Access, and created a Connection profile, with clientless SSL VPN protocol enabled

when i access to outside of the ASA, im promtet for login, and after succesful login, it starts to download and install the Anyconnect client. and the portal never appers, i have change the option "default post login selection" to go to clientless SSL VPN portal, but i has no effect.

what am im missing ??, i have enabled the service before on other ASA firewall, without any problem, as i recall there`s no need for additional software on the ASA.

i have tried to manuel change the url to https://Domain.domain.dk/+CSCOE+/portal.html , after a succesful login, but it auto changes to

https://Domain.domain.dk/+CSCOE+/noportal.html

Cisco ASA5510 Clientless webportal problem

danhed7400 — Fri, 27 Jan 2012 09:26:54 GMT

no comment on this ?

Cisco ASA5510 Clientless webportal problem

RonJaws4-CTP — Thu, 26 Apr 2012 12:41:41 GMT

Hopefully you have figured this out by now, its been a few months. I had the same problem. You must disable anyconnect essentials in order to use Clientless VPN. I recommend checking with TAC on your license situation first and also testing to ensure both clientless and client vpn work after you make the change. See the screenshot below.

I hope this helps

Cisco ASA5510 Clientless webportal problem

mpfau — Sat, 09 Mar 2013 10:24:53 GMT

Hi Ron,

hi Dan,

I still run into the same problem after adding an AnyConnect Premium Peer License to an ASA which still have

AnyConnect Essentials License.

After configuring clientless vpn I run into the first issue: after successfully login with clientless vpn the anyconnect client downloader starts automatically every time. No matter that in every group-policy the 'Post Login Settings' are configured to 'Go to Clientless SSL VPN portal'.

I spent hours in troublehshooting and nothing helps. Even deleting all group-policies, tunnel-groups and webvpn configuration making the complete configuration step-by-step again is leading into the same problem.

Only when I toggle the 'Post Login Settings' to 'Prompt user to choose' I got the same issue as Dan:

Empty page on https://Domain.domain.de/+CSCOE+/portal.html

Then I found this thread and Rons answer. After disabling anyconnect essentials as Ron wrote the clientless vpn is working.

Many Thanks!

Michael

Cisco ASA5510 Clientless webportal problem

m-mostafa — Sun, 22 Dec 2013 09:45:38 GMT

dear sir

i need help with the clientless web vpn configuration through ASA 5520 with 7.2

I've done all the configuration on the asa and everything is working but still a problem with the port-forwarding which is on the client side the java don't wont to accept the certificate is there a solution for this problem

actually my goal for configuring the clientless webvpn is to allow telnet and remote desktop sessions

hope there is an answer

Re: Cisco ASA5510 Clientless webportal problem

fturner94 — Wed, 08 Apr 2020 18:55:24 GMT

This is mainly for anyone who stumbles upon this now since it was never answered. I had this issue recently and after verifying "http server enable" was set, "Encryption-3DES-AES" was Enabled (show version) and I had access available from the subnet I was trying to access it from, I just changed the path to include the "/admin", (so https://x.x.x.x/admin) option and it allowed me to access the ASA.

I was just attempting to get to the web browser to download ASDM and ran into this, so hopefully this helps anyone doing a frantic google search!

Re: Cisco ASA5510 Clientless webportal problem

alain.riesen — Thu, 15 Feb 2024 06:43:18 GMT

there might be a simple solution to this. It might be, that in the WebVPN configuration the secure client (anyconnect) image is missing.
Adding it with "anyconnect image flash:/<image>.pkg 1" did solve the problem for me.