I have an ASA running 8.0.4(28) providing SSL VPN access to AnyConnect clients running version 2.3.0254. When connecting, authentication works great using RSA tokens. After authentication, the Clean Access Agent (CAA) is invoked by the NAC Clean Ac...

When using SSL VPN with NAC, we have NAC configured to assess and remediate AV signatures and OS updates with Windows SUS. The issue we have is the lenght of time it takes (never less than 90 seconds) for SUS to complete the assessment of the remote...

How can I use TCPdump with the CAS? When specifying a physical interface while using TCPdump, it only picks up broadcast traffic. For example tcpdump -vv -nn -i eth1. Is there special options to look at all traffic through the CAS in my L3 deploym...

I would like to configure my ASA 5520 to support 3 scenarios in the same box:- Untrusted (kiosk mode) where the remote host is forced to use CSD- Trusted host identified by regedit and can select either SSL VPN or WebVPN (portal only, no CSD) by drop...

I have a presentation server farm sitting behind a Cisco ASA. The ASA acts as the Citrix Access Gateway in this design and provides a WebVPN connection with Secure Desktop to the remote client via SSL. The Cisco ASA is configured with a certficate fr...