Hi Iain,
Looks like this question went into the "Firewalling" section by mistake, instead of to the VPN section. That's probably why you haven't received any replies yet.
Regarding your issue:
1. You can check the group-policy selected for your test user with the command "show vpn-sessiondb webvpn filter user " on the ASA CLI. The output of this command contains a line starting with "Group Policy", which is what you need to look for.
2. Once you have confirmed, that the correct group-policy is selected, verify, if this group-policy has the desired bookmark list ("url-list") configured by using the "show run group-policy | include url-list" command. Does this output point to the correct bookmark list?
3. If yes, verify, that this bookmark list is not empty using the "export webvpn url-list stdout" command. Does this give any output?
4. If all is still fine up to this point, the most likely cause for why you are not seeing the bookmark list is a Dynamic Access Policy (DAP), that is removing it. To check for this, enable "debug dap trace" on the ASA CLI and login with your test user.
You can safely ignore most of the output of this command, just look for a line containing "Selected DAPs", it will look similar to this:
---snip---
DAP_TRACE: Username: , Selected DAPs:
---snip---
Whatever DAP gets selected (even, if it should be the "DfltAccessPolicy"), look at the output of "show run dynamic-access-policy-record ". If you are seeing "url-list none" in this output, it is this DAP policy creating this issue. To resolve it, open up ASDM, go to "Configuration -> Remote Access VPN -> Clientless SSL VPN Access -> Dynamic Access Policies" and "Edit" the policy which has "url-list none". Next, go to the "Bookmarks" tab in the "Access/Authorization Policy Attributes" section and set the checkmark at "Enable bookmarks", then click "OK" and "Apply".
If you prefer working on the CLI, you can also do the following on the CLI to resolve this:
---snip---
ASA# conf t
ASA(config)# dynamic-access-policy-record
ASA(config-dynamic-access-policy-record)# webvpn
ASA(config-dap-webvpn)# no url-list none
---snip---
Reconnect to WebVPN and you should see your bookmarks now.
5. If you see your bookmarks, but they are greyed out, this means, that you are using DNS names in your bookmarks, that ASA cannot resolve. In this case, please check your DNS server settings in ASDM under "Configuration -> Remote Access VPN -> DNS" and make sure, that the configured DNS server is reachable from the ASA.
Please let me know, if this helps.
Cheers,
Michael
