cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

13198
Views
5
Helpful
4
Replies

Anyconnect Auto Connect

Hi Team,

We got a requirement is to make the anyconnect to Autoconnect to our network whenever the PC Restarts or the Internet link Disconnects. So is there any way to Remeber the Password in Anyconnect Software and making it to Auto connect whenever there is Distruption in the Network. We are running the latest version Anyconnect 4.X.

 

Kindly request your expertise advice on this.

 

Thank you,

-Vishnu

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Advocate

You can use Always On with

You can use Always On with Trusted Network detection feature of Anyconnect to have the client connect automatically when on an untrusted network.

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect44/administration/guide/b_AnyConnect_Administrator_Guide_4-4/configure-vpn.html#ID-1428-000001c7

Regarding saving password, this is not possible. In order to have a seamless user experience, you would need to use client certificates to authenticate the user instead of username and password authentication.

View solution in original post

4 REPLIES 4
VIP Advocate

You can use Always On with

You can use Always On with Trusted Network detection feature of Anyconnect to have the client connect automatically when on an untrusted network.

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect44/administration/guide/b_AnyConnect_Administrator_Guide_4-4/configure-vpn.html#ID-1428-000001c7

Regarding saving password, this is not possible. In order to have a seamless user experience, you would need to use client certificates to authenticate the user instead of username and password authentication.

View solution in original post

Thanks a lot Rahul !!!

Thanks a lot Rahul !!!

 

So we will enable the Always ON feature and test with the Certificate Authentication.


 

We got a Internal CA Server in the network. So to configure the Certificate based authentication,  we need to import the root Certificate in to ASA. And sign the Certificate for individual PC's with this Certificate right ?

 

Do you have any document for the Certificate Based Authentication and how we can obtain a certificate for the END host.

 

Thank you,

-Vishnu

VIP Advocate

You are correct. The ASA will

You are correct. The ASA will have the root cert and end users will have client certificates.

You can use SCEP Proxy feature on the ASA to automate end user certificate enrollment. The Admin guide should have the certificate enrollment configuration steps:

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect44/administration/guide/b_AnyConnect_Administrator_Guide_4-4/configure-vpn.html

Another option is to use GPO to issue client certificates to users.

Highlighted

Thanks again, will follow the

Thanks again, will follow the same and update the status.

 

Thank you,

-Vishnu

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here