Solved: Re: Please help!

HuntLee304798 · ‎06-01-2020

Hi Everyone,

There are 3 tunnel-groups i have setup as attached. Because the AnyConnect VPN is for mobile users, and i want the end-user experience to be as seamless as possible. Is there a way that i can "pre-select/choose" the "City Of Sydney" for the mobile users? (as i do not want any user intervention when they use AnyConnect on their mobile)

I read through the section Any connect profile for Mobile, but I am still unable to think of a way to achieve this.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/anyconnect-profile-editor.html#reference_388C0A6199634CFBA774906DDF18E1A3

Attached is the AnyConnect login screenshot and my ASA config.

Cheers,

Hun

Rob Ingram · ‎06-02-2020

Hi,

Define a "group-url" this will enable you to have a unique URL for mobile e.g. https://vpn.companyname.com/TunnelGroup1, the anyconnect client on the devices just need a profile to connect to that URL.

Reference and example here:-

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98580-enable-group-dropdown.html

HTH

View solution in original post

Rob Ingram · ‎06-02-2020

Hi,

Define a "group-url" this will enable you to have a unique URL for mobile e.g. https://vpn.companyname.com/TunnelGroup1, the anyconnect client on the devices just need a profile to connect to that URL.

Reference and example here:-

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98580-enable-group-dropdown.html

HTH