Secure Client Scripts, Proxy Override, and Allow Manual Host Entry

[sridharan srinvasan]

1. Secure Client Scripts

• Feature Overview:

  Secure Access now supports the management of scripts that will be executed during VPN connect and disconnect. Scripts include configuring network settings, mounting network drives, or enforcing security policies. This empowers organizations to optimize their network and security operations with greater precision and flexibility.

• Documentation Link: Manage Secure Client Scripts 

2. Allow Manual Host Entry

• Feature OverviewAdministrators can prevent end-users from manually entering any VPN headend by unchecking the "Allow Manual Host Entry" option. This ensures users can only select pre-approved VPN headend as part of the VPN profile configuration. Disabling manual host entry reduces the risk of data exfiltration by preventing connections to unauthorized VPN headend. Users are restricted to pre-approved VPN endpoints, enhancing overall network security.
• Documentation Link: Manage VPN Settings

3. Proxy Setting Override per VPN Profile

• Feature Overview:

  Cisco Secure Access now allows to inherit client proxy setting configurations when connected to VPN.

  Option includes:
• Client Device Proxy Settings (Do Not Override): Maintains existing browser proxy configurations on client during VPN session
• Do Not Use Proxy Server: This prevents any browser proxy defined on the client device from being used during the VPN session.
• Custom proxy: Defining a specific proxy server, port, and exemption list for all client devices during the VPN session
• Documentation Link: Add VPN Profiles - VPN Traffic Steering