Hello,we want to migrate ASA to a failover cluster, but we must delete the local CA, because it is not supported there. What CA do you use in such scenario for managing users and their certs? We tried MS AD CA, which worked fine for Identity certific...

Hello, as we need to make a failover Active/Standby cluster from our ASA, used as an Anyconnect users harbour, local CA is not allowed. I am basically fine as to how to generate certs for users on the Windows server, but cannot imagine, what about th...

Hello, I am trying to setup above.My idea is allow only SSL clients, they have a certificate, but maybe I didn't get the concept behind.I am using local AAA server and did setup users in local AAA database, including group policy, tunel ACLs etc.I di...

Hello,I am implementing ASA 5510 for SSL Anyconnect client RAS only.  It will be a part of existing firewall infrastructure.ASA has a public internet (outside)  interface to setup a VPN tunnel and should route all the RAS users traffic to internal ne...