Cisco anyconnect Firewall configuration

[vishnuvichu36601]

In Cisco anyconnect VPN client there is a settings option as a firewall. In Cisco ASDM where we configure this firewall.

[Karsten Iwen · Accepted solution]

First, here are some more info on the firewall rules. Just to make sure you are aware what they are for:

https://supportforums.cisco.com/t5/security-documents/how-are-firewall-policies-handled-by-the-asa-and-the-anyconnect/ta-p/3119582

They are configured in the webvpn-section of a group-policy. But IMO they are poorly documented.

[vishnuvichu36601]

In Cisco ASDM where is the option for anyconnectclient firewall settings?

[Karsten Iwen]

Configuration -> Remote Access VPN -> Network (Client) Access -> Group-Policy -> YOUR-POLICY -> Advanced -> AnyConnect Client -> Client Firewall

[vishnuvichu36601]

In each client firewall, we need to write extended ACL for VPN users for
their needs.