Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ticketreturn
Stats
Member since
08-24-2012
12
Posts
0
Helpful
0
Solutions
08-07-2013
08:18 AM
We have some users that were connecting to our ASA520 & then being able to use RDP bookmarks to connect to various servers. Then they updated to IE 10 & things started unraveling. After uninstalling IE10 they can login to the remote access site, but are unable to RDP to any of the servers. They are able to connect with other browsers & connect to the servers with Java, but they want to connect with IE/RDP. IS anyone aware of this issue & work arounds? Thanks BigSam
... View more
Labels:
11-28-2012
10:14 AM
So I don't do anything like '?parmx = CSCO_WEBVPN_MACRO1' in the bookmark? I want to populate the field with an value from my AD, associated with the user login. In Remote Access VPN -> AAA/Local Users -> LDAP Attribute Map I defined an entry (MyMacro) for Department = WebVPN-Macro-Substitution-Value1 In my bookmark -> Advanced Options I set the URL method to Post & added a Post Parameter associating MyMacro to the value for CSCO_WEBVPN_MAVRO1. I think I can modify the MyMacro rntry in the LDAP Attribute Map to use a static value rather than a AD value for testing purposes, to see if it is infact being passed to the program. At minimum this should indicate if I'm not getting the value from the AD.
... View more
11-28-2012
08:43 AM
That helped tremendously. Thanks. Also, I found that another admin had configured terminal services login to not recognize the parameters being passed. Once that was changed, along with the other hints from the mentioned article I made good progress. I still have the issue of the CSCO_WEBVPN_MACRO1 parameter. The server is configured to automatically start a program looking for a value, but it isn't receiving it. Right now I just have &CSCO_WEBVPN_MACRO1 in the bookmark, do I need something like parameter=CSCO_WEBVPN_MACRO1? or is it the variable name from the program? Thanks again.
... View more
11-27-2012
12:46 PM
I've configured an ASA5505 with clientless SSL VPN access. I see that the user is authenticated in my Active Directory, and the bookmark with the RDP connection is available. The bookmark URL contains 10.10.20.46/username=CSCO_WEBVPN_USERNAME&password=CSCO_WEBVPN_PASSWORD&CSCO_WEBVPN_MACRO1 When I click on the bookmark, I get to the server, but the user isn't logged in; the user name & password fields are blank & the message under the fields has Log on <domain name>. The Auto Sign-On server is enabled, and in the Smart Tunnel Auto Sign-on I checked the Use Windows domain name with username. The Terminal Server is W2k8 Data Center Edition - VMWare 4.0. Cannot seem to figure this one out. Any suggestions are appreciated. ASA Version: 8.4(4)1, ASDM Version: 6.4(9) Also, the CSCO_WEBVPN_MACRO1 is configured to get the Department value from the Active Directory. I don't know if this is working or not. Is there a way to verify it? Thanks for the help.
... View more
Labels:
Created by
ticketreturn
in VPN and AnyConnect
in VPN and AnyConnect
11-14-2012
10:51 AM
11-14-2012
10:51 AM
I have a clientless ssl-vpn connection on an ASA5505. I want to create a bookmark that permits me to launch an application on a server at this remote location. I created a bookmark with an RDP connection; the URL is rdp://10.10.30.22/C:\Program Files\MyApp.exe?geometry=1024x800&username=xxx&password=yyy When I click on the bookmark I get an RDP connection to the server @ 10.10.30.22, but the program I want to run doesn't start. How do I lunch the program? How do I keep users from running anything else on the server?
... View more
Labels:
11-13-2012
08:01 AM
I've an ASA 5505 that I'm configuring for clientless ssl-vpn. I can access the login page from a remote address as expected, but not login. I captured the log entries from the monitoring feature & saw a message stating 'AAA authentication server not accessible'. I used the TraceRt feature to determine that I can access the server hosting Active Directory, so I reviewed the servers in the AAA Server Groups. The settings appear correct: the interface is in the same VLAN as the server & the same one used in the TraceRT test; I've enabled LDAP over SSL, port 636 & can telnet to the server on that port from other devices in the VLAN; the server type is Microsoft; all the other settings appear correct for connections. I'm baffled where to look for the resolution. Any suggestions are appreciated.
... View more
Labels:
Created by
ticketreturn
in VPN and AnyConnect
in VPN and AnyConnect
10-09-2012
12:07 PM
10-09-2012
12:07 PM
I've a ASA5505 that I'm configuring to accept Clientless SSL VPN remote connections. Each user attempting to connect must have a client certificate matching their user name. 2nd factor in the authenication process is the user account/pwsd in our Active Directory. I have a CA (W2k8), that I'll use to issue the client certificates with. I thought I'd issue a certificate for the clientless web site, too, but I don't know how to generate the request. I'm running ASDM 6.4(9), and ASA version 8.4(4)1.There isn't much helpful information in the Certificate Management configuration section. I assume I need an entry for CA Certificates, but don't really understand what for, nor how to add them. And I assume I'll need an entry in the Identity Certificates, but again, I don't know how. So far I haven't found helpful documentation on the whole process. Can someone point me in the proper direction? Thanks
... View more
Labels:
08-31-2012
08:50 AM
I thought I had configured the various software corectly on an ASA 5505, but appears not. In Show Version the ASA Software version is 8.4(4)1 & the Device Manager version is 6.4(9). These are the settings I want; I had previously set asdm image disk0:/asdm-649-103.bin & boot system disk0:/asa844-1-k8.bin followed by copying the running config to the startup config When I boot the system & open a browser to the device I immeadeatley get a screen showing Cisco ASDM 6.2(1). How so? If I attempt to install, run ASDM or Run Startup Wizard nothing happens - browser times out. I suspected that maybe I needed the device to trust my PC, so I enabled HTTP & tried to setup the trust with my PC. After HTTP Server enable I entered http 192.168.1.0 255.255.255.0 mgmt, but received an invalid input on the mgmt, I don't know what the correct command is now. So i'm confused. Do I have the correct version of ASDM installed & is it available when I boot the system? Is my PC able to access the site to manage the device via the ASDM tool?
... View more
Labels:
Created by
ticketreturn
in Security Management
in Security Management
08-29-2012
01:09 PM
08-29-2012
01:09 PM
I need to upload a new version of ASDM to my device, so that it will work with the ASA software. I tried using a TFTP server on my PC, but received an error. I connected to the ASA with the console cable & since I'm running Win7, I used Putty & a serial connection. Once connected to the ASA I logged-in & issued a Copy TFTP Flash command. I supplied the IP address of the PC & the file name in the TFTP server, which was running on port 69. In trying to determine the problem, I noticed that I was unable to ping the PC, which explains the error. I tried using Telnet & SSH connection with Putty, but when I press <Enter>, nothing happens in the open window. Now I'm stuck & don't know how to proceed. Any suggestions or recommendations? Thanks, BigSam
... View more
- Tags:
- asa
- management
Labels:
Created by
ticketreturn
in VPN and AnyConnect
in VPN and AnyConnect
08-24-2012
01:10 PM
08-24-2012
01:10 PM
I need to create a bookmark that does the following: Connect to a Windows server with an RDP session Provide a user ID & password (not the user ID authenticated with my Acitive Directory when the user connected) Open a program on the server Pass a paramater to the program I've gone through lots of attempts at this & have finnally given up. I don't even know if it can be done. Any help is appreciated. BigSam
... View more
Labels:
08-07-2013
We have some users that were connecting to our ASA520 & then being able
to use RDP bookmarks to conn...
11-28-2012
So I don't do anything like '?parmx = CSCO_WEBVPN_MACRO1' in the
bookmark?I want to populate the fie...
11-28-2012
That helped tremendously. Thanks.Also, I found that another admin had
configured terminal services l...
11-27-2012
I've configured an ASA5505 with clientless SSL VPN access. I see that
the user is authenticated in m...
11-14-2012
I have a clientless ssl-vpn connection on an ASA5505. I want to create a
bookmark that permits me to...
11-13-2012
I've an ASA 5505 that I'm configuring for clientless ssl-vpn. I can
access the login page from a rem...
10-09-2012
I've a ASA5505 that I'm configuring to accept Clientless SSL VPN remote
connections. Each user attem...
08-31-2012
I thought I had configured the various software corectly on an ASA 5505,
but appears not.In Show Ver...
Created by
ticketreturn
in Security Management
08-29-2012
08-29-2012
I need to upload a new version of ASDM to my device, so that it will
work with the ASA software.I tr...
Public Statistics
| Date Registered | 08-24-2012 01:03 PM |
| Date Last Visited | 08-18-2017 03:56 AM |
| Total Messages Posted | 12 |
