Hi all,
We have AnyConnect RA VPN with Certificate Authentication only. (No AAA,LDAP nothing) We want to allow only users who have certificates on smart card and that too from our own PKI Sub-CA. We have configured all this in the Client Profile. However, the pre deployed client profile is not working for us when someone connects for the first time. Hence anyone with a valid certi signed from our CA and that too in machine store on the PC, is able to connect to VPN. We dont want that.
So is there a way to configure DAP to allow only those users who have the required correct certificate on their smart cards only?
(may be with LUA code or something)
Any help is appreciated.
T&R,
R
