ASA 5505 and NTLMv2.

[jasonb77]

Hey all,

I have an ASA 5505 running WebVPN, but it is using NTLMv1. Is there a setting I can put in to force it only to use NTLMv2?

[brquinn]

NTLM v1 and v2 is only supported for Clientless SSL, VPN HTTP-Forms authentication, and Single Signon (SSO auto-signon) capabilities. There is no way to toggle support for these versions.

Please note that there is a "NTLMv1 Authentication Bypass Vulnerability" addressed by advisory cisco-sa-20100217-asa. I hope this helps.

Thanks,

Brendan