Hello,
How can I remove the web login/portal-login feature, from the WebVPN/SSL-VPN, so users have no other option than connect through anyconnect client and not the web?
what command is missing in this template, and what command I shouldn't put?
ASA1(config)# webvpn
ASA1(config-webvpn)# anyconnect image flash:/anyconnect-03-k9.pkg
ASA1(config-webvpn)# enable outside
ASA1(config-webvpn)# anyconnect enable
ASA1(config)# sysopt connection permit-vpn
ASA1(config)# http redirect OUTSIDE 80
ASA1(config)# ip local pool VPN_POOL 192.168.10.100-192.168.10.200 mask 255.255.255.0
ASA1(config)# access-list SPLIT_TUNNEL standard permit 192.168.1.0 255.255.255.0
ASA1(config)# group-policy ANYCONNECT_POLICY internal
ASA1(config)# group-policy ANYCONNECT_POLICY attributes
ASA1(config-group-policy)# vpn-tunnel-protocol ssl-client ssl-clientless
ASA1(config-group-policy)# split-tunnel-policy tunnelspecified
ASA1(config-group-policy)# split-tunnel-network-list value SPLIT_TUNNEL
ASA1(config-group-policy)# dns-server value 8.8.8.8
ASA1(config-group-policy)# webvpn
ASA1(config-group-webvpn)# anyconnect keep-installer installed
ASA1(config-group-webvpn)# anyconnect ask none default anyconnect
ASA1(config-group-webvpn)# anyconnect dpd-interval client 30
ASA1(config)# tunnel-group MY_TUNNEL type remote-access
ASA1(config)# tunnel-group MY_TUNNEL general-attributes
ASA1(config-tunnel-general)# default-group-policy ANYCONNECT_POLICY
ASA1(config-tunnel-general)# address-pool VPN_POOL
ASA1(config-tunnel-general)# exit
ASA1(config)# tunnel-group MY_TUNNEL webvpn-attributes
ASA1(config-tunnel-webvpn)# group-alias SSL_USERS enable
ASA1(config)# webvpn
ASA1(config-webvpn)# tunnel-group-list enable
ASA1(config)# username SSL_USER password MY_PASSWORD
ASA1(config)# username SSL_USER attributes
ASA1(config-username)# service-type remote-access
Thx
