AnnyConnect VPN

[mohammedrafiq]

Hi,

We are replacing our RSA token based VPN with certificate based VPN authetication by using Windows 2012 as certificate server (internal) and ASa 5510 as shown in attached diagram.

Does anyone has this setup and example configuration .

[Kanwaljeet Singh]

Hi Mohammed,

Please have a look at the below link:

https://supportforums.cisco.com/blog/152941/anyconnect-certificate-based-authentication

The versions are different but should give you a good idea about the configuration steps.

Let us know if you have any further questions.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

[mohammedrafiq]

Thanks Kanwal,

How different will be with Windows 2016 server compare to 2003 server ? Do we need root CA server or only one is enough?

Regards,

[Kanwaljeet Singh]

Hi Mohammed,

I am not sure how the interface would differ across codes but you definitely would need a CA which should provide you root cert, intermediate and identity certificate.

Regards,

Kanwal

Note: Please mark answers if they are helpful.