ASA question

[coconino1969]

Hello Forum

Device - Cisco ASA 5540 (9)

Is it possible to create rules to allow a VPN user to login using his Windows laptop but stop his IPAD?

Thanks for the help.

[Julio Carvajal · Accepted solution]

Hello,

For this kind of setup you are looking for an Identity Engine that based on signatures can determine what device you are using to connect.

For this you can use the Cisco ISE but not the Cisco ASA.

Regards,

jcarvaja
CCIE R&S 42930, 2-CCNP,JNCIS-SEC
Looking for a quick remote support session? Contact us at inetworks.cr 

[coconino1969]

Thanks for the help J

[Marvin Rhoads]

You can do this without needing to use ISE by using Dynamic Access Policies (DAP) if you have AnyConnect Premium and Advanced Endpoint Assessment licensing on the ASA.

Reference.

Also, without AnyConnect for Mobile licensing the iPad client won't be able to login at all.

[coconino1969]

Marvin

Thanks for the input.