This document describes a scenario in which user is trying ASA to authenticate Anyconnect users with Phonefactor authentication.
IOS V 8.2(1)
In an existing setup user wants that his/her ASA should authenticate Anyconnect users by using Phonefactor authentication.
User need to do following 2 jobs:
Configure ASA for RADIUS
1. Go to file management:
2. Select "Between local PC and Flash.
3. Select the image from your local folder and move it to "disk:0":
4. Finally, define the ASDM image:
5. Quit the active ASDM instance and connect again.
ASA and Phonefactor
For this user need to configure the ASA to send a RADIUS request to PhoneFactor, user have to set the RADIUS timeout there as well so that the ASA doesn't time out waiting for a response from PhoneFactor. So, both the ASA and the AnyConnect client need to have a enough time out for the call to take place and get a response.
By default, AnyConnect waits up to 12 seconds for an authentication from the ASA before terminating the connection attempt. user can modify this value in the XML profile as following:
Greetings, First time doing ZBF configuration for brand new C1111x, and after reading posts here and on Cisco docs, with a simple target to grant users internet connection and block connections from outside to the router I did the following: int...
I am able to connect it successfully but why this error msg coming that i dont know Actually In MY setup FTD 2110 with ASA and created Two Context(ASA Firmware -ASA Version 9.12(3)12) Anyconnect Version :- 4.8.03052IN Context A i am able to connect a...
I tried to upgrade ASA 5525 via ASDM from 9.8 (asa982-smp-k8) to 9.12 (asa9-12-3-12-smp-k8) that was directly downloaded from Cisco website, unfortunately it keeps failing and i get this error message "Error writing request body to server" as be...
Hi I need to upgrade ISE from version 2.4 to version 2.7. Is there any method to downgrade to version 2.4 if required? I need to know this in case it is necessary to go back. In Cisco it is not documented if it can really be don