I thought Cisco ASA would unblock ESP 50 automatically for the peer I configured for Site to Site on IKEv2... 2 Cisco ASA are on Internet and communicate with their outside interfaces Which information do you want?    Thanks !!! Patrick ... View more

Hi Md Raza, Thanks for your quick answer. This time cant be infinite. I would like to keep connection as longer as possible even without traffic. Is there a way on VPN configuration? (with keepalive) Or should I use a script ping continuously from extended office?    Regards, Patrick ... View more

Hi Karthik, Thanks for your answer :) I know that AnyConnect supports VDI deployments. My question is different. From my computer A, I use remote desktop on another computer B. B has AnyConnect installed and can connect to our ASA infrastructure using SSL VPN. When I connect AnyConnect VPN from remote desktop, AnyConnect automatically disconnects because of the client profile default setup. By default, Local Users Only is selected.   Here is Cisco ASA documentation: Windows VPN Establishment —Determines the behavior of AnyConnect when a user who is remotely logged on to the client PC establishes a VPN connection. The possible values are: Local Users Only—Prevents a remotely logged-on user from establishing a VPN connection. This is the same functionality as in prior versions of AnyConnect. Allow Remote Users—Allows remote users to establish a VPN connection. However, if the configured VPN connection routing causes the remote user to become disconnected, the VPN connection terminates to allow the remote user to regain access to the client PC. Remote users must wait 90 seconds after VPN establishment if they want to disconnect their remote login session without causing the VPN connection to be terminated. I assume that Cisco AnyConnect client can detect that user is logged with RDP . Can AnyConnect detect others type of Remote Desktop (VDI, Xen...) with this option ? Thanks, Patrick ... View more