cisco anyconnect - laptop/desktop authentication

[saif akbar]

Hi,

we are using cisco anyconnect for VPN to connect to our network. the authentication is through Radius server.  The problem is that if a user who have access to vpn can download anyconnect to any computer at his home and able to connect. What i want is to have all users who have VPN access to use their company provided laptops only, if they are using their personal computers they should be blocked. is there a way our ASA can only allow specific laptops ?  The VPN appliance in my network is ASA 5515-x.

Can any one guide me, how to achieve this ? Any appliance etc. ?

[Marvin Rhoads]

If you have AnyConnect Premium with Advanced Endpoint Assessment (or the new AnyConnect Apex) licenses, you can perform a check to determine of the remote device is a domain member (or any other number of such checks involving registry keys etc.).

With AnyConnect Essentials (or the new AnyConnect Plus) this is not possible.

[saif akbar]

thanks for your reply. So it is impossible ? No work around ?

[Marvin Rhoads]

Not as far as I know. 

If you have the basic license, you get basic functionality.