Remote Access - Design

[jeanpaul.cisco]

Hello

Business requirement is to ensure Remote access service is available for 400 users with around 75 concurrent. The solution should be scable to support around 600 users max with 150 concurrent users.  Remote access solution should support

• 2008 Active Directory integration
• different level of access to be provided to users. i.e only allow email access, allow full access, allow SAP access
• all activity should be logged. i.e who - when logged in - logged out  /  passed authentication-failed authentication /
• ensuring users access VPN from corporate laptop only

Appreicate getting feedback on what hardware / software needed to cover the requirement

thanks

Jean

[Marwan ALshawi]

Check the data sheet of cisco ASA 5520 and ASA 5525-x

Both can provide up to 750 VPN remote access using any connection client or client less using web/ssl

and for sure you can get logging, AD Integration

Hope this help

[jeanpaul.cisco]

Thanks for the response.

what license to purchase for ASA  to facilitate Web/SSL and any connect vpn client

Do we need to pay for client software based on users

for authentication, authorization and logging which tool is recommended

thanks

Jean

[Marwan ALshawi]

when you purchase the ASA you can specify the VPN type you want with amount of licenses

ASA can integrate directly with AD or you may use Cisco ACS to integrate with ASA and ACS can communicate with your AD for authentication

logging can be send from ASA to any software you might have you can research on this

HTH

[shillings]

Hi Paul, you might consider some of the new cloud security offerings that tie-in with the ASA 5500 and 5500-X platforms. For example, Cloud Web Security (CWS) can inspect HTTP and HTTPS traffic for both your corporate users and remote users. It includes anti-Malware and a couple of AV scanners.

Remote machines utilise a split tunnel, where all web traffic is forced through Cisco's Scansafe cloud and all corporate traffic is routed to the head-end ASA.

You'll need version 9.x software. CWS is per-user licencing, so offers granular pricing.

The only catch is that I'm pretty sure remote users require the more expensive AnyConnect Premium per-user licencing, instead of the cheaper AnyConnect Essentials per-platform licence. But check as I'm not 100% sure from memory.