topic Re: removing "webvpn" from config? in Network Security

removing "webvpn" from config?

slug420 — Mon, 11 Mar 2019 17:07:16 GMT

I have a 5520 that I am working on (8.2.2)....and in the config it has the line "webvpn". How do I get rid of this since I have no vpn or webvpn configured on the FW?

Here is how it looks:

ntp server NTP
webvpn
username jeebus password t36djd3bz4sKT encrypted privilege 15

Re: removing "webvpn" from config?

Kureli Sankar — Wed, 10 Feb 2010 14:58:55 GMT

conf t

no webvpn

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/uz.html#wp1633929

-KS

Re: removing "webvpn" from config?

slug420 — Wed, 10 Feb 2010 15:03:00 GMT

I had actually already thought of that....

ASA5520(config)# sh run | inc webvpn
webvpn
ASA5520(config)# no webvpn
ASA5520(config)# wr mem
Building configuration...
Cryptochecksum: c9902289 d618d334 f41f9a36 a8ecfacc

18110 bytes copied in 3.370 secs (6036 bytes/sec)
[OK]
ASA5520(config)# sh run | inc webvpn
webvpn
ASA5520(config)#

Re: removing "webvpn" from config?

Kureli Sankar — Wed, 10 Feb 2010 15:15:12 GMT

According to that link that I provided above:

To remove all commands entered in webvpn mode, use the no form of this command. These webvpn commands apply to the username or group policy from which you configure them.

Webvpn commands for group policies and usernames define access to files, MAPI proxy, URLs and TCP applications over WebVPN. They also identify ACLs and types of traffic to filter.

webvpn

no webvpn

WebVPN is disabled by default.

So, no webvpn will only remove all the lines that you have configured under it and looks like it will not remove the webvpn line from the config as it is disabled by default.

-KS

Re: removing "webvpn" from config?

slug420 — Wed, 10 Feb 2010 15:50:20 GMT

only one of my ASAs (about 20 of them) has this line in it.

Re: removing "webvpn" from config?

Kureli Sankar — Wed, 10 Feb 2010 16:13:11 GMT

See what the diff. is between them.

sh ver and check the features.

-KS

Re: removing "webvpn" from config?

slug420 — Wed, 10 Feb 2010 16:19:36 GMT

one has a 4GE-SSM

thats the only difference between the two im looking at right now

Re: removing "webvpn" from config?

ymoges — Tue, 30 Jan 2018 16:28:12 GMT

I have a 5505 asa running on 9.1 and I am unable to remove webvpn.
GH-Rmte-ASA-5505# sh run | inc webvpn
webvpn
GH-Rmte-ASA-5505# config t
GH-Rmte-ASA-5505(config)# no webvpn
GH-Rmte-ASA-5505(config)# wr
Building configuration...
Cryptochecksum: 609e15ff 201fc047 5605b11f 86071161

13545 bytes copied in 1.590 secs (13545 bytes/sec)
[OK]
GH-Rmte-ASA-5505(config)# sh run | inc webvpn
webvpn
GH-Rmte-ASA-5505(config)# sh run webvpn
webvpn
anyconnect-essentials
GH-Rmte-ASA-5505(config)# wr
Building configuration...
Cryptochecksum: 609e15ff 201fc047 5605b11f 86071161

13545 bytes copied in 1.610 secs (13545 bytes/sec)
[OK]
GH-Rmte-ASA-5505(config)# sh run webvpn
webvpn
anyconnect-essentials
GH-Rmte-ASA-5505(config)#

Re: removing "webvpn" from config?

Noclss2000 — Wed, 31 Jan 2018 16:23:46 GMT

I'm actually having the exact same issues.

I've got 2 ASAs, one being a 5505 with 9.2(4)14 and the other being a 5515 running 9.1(1). I give the no webvpn commands and it doesn't go away. I go into webvpn and then give the no anyconnect-essentials command and then exit webpn thinking that maybe removing configs within the webvpn config would help. I then try to remove wevpn afterwards again. still no dice.