We use the ASA as a CA for some client certs as 2FA when needed.  Now that iOS 12 requires the new Anyconnect (non-legacy) client, we find it will no longer install these certs.  I've even exported the cert from the ASA and manually installed it in t...

We upgraded our ASA VPN servers to 9.8.2 to support the 64-bit MacOS v4.6 clients recently.  The Mac v4.600362 and later v4.601098 would have traffic running very slow (~100-200Kbps !) over the VPN and usually stop passing traffic within 30min.  The ...

We map user's Group Policy in through the IETF-Radius-Class LDAP attribute map.  Short of creating a new LDAP attribute and special Group Profile, is there an easy/common way to have users select which group policy they would like to connect to in An...

We primarily run split-tunnel on our ASA-5555X server for Anyconnect clients, but at times we'd like to provide tunnelall service through a Group selection.  Since tunnelall requires NATing on an interface, is there a way to run both split-tunnel con...