VPN client user authentication

[dnazefg20]

When users connect to our network remotely via VPN the username field is already populated with the last person who connected. I know they can just remove the username and enter their own, but is there a way the client can be configured to where the username field will always be blank for anyone who wants to access the network via VPN? We have an ASA 5510 with version 7.0(8) and a windows server 2003 with IAS installed on it for windows authentication. Thank you!

[Yudong Wu]

I am not sure if there is another way to do it. But you can change related .pcf profile to "readonly". It should be located in "C:\Program Files\Cisco Systems\VPN Client\Profiles" by default.

[hunnetvl01]

How do you generate de pcf file?

Thanks,

Vlad

[Yudong Wu]

In VPN client, after your create a "Connetion Entry", you will find a .pcf file with the name of Connection Entry you created under the folder mentioned in my previous post.

[dnazefg20]

I figured it out. I was giving users a pcf file that I have been using for quite some time. Hence, everyone was seeing my username pop up on their clients. I recreated the connection entry and before going through the user authentication process I placed the new pcf file in another location. I will now start to give users this new pcf file that does not contain any user credentials.

Thanks for the responses.

[hunnetvl01]

Thanks,

I saw the previous one!

Have fun

Vlad

[stephan.ochs · Accepted solution]

Hi

In the pcf you can configure that single lines cant be changed by the user (or vpn client).

Just insert a leading ! like this

!Username=

!SaveUserPassword=0

!UserPassword=

!enc_UserPassword=

From now on the vpn client wont save entries for those parameters any more.