Want to open up by saying I am very new to VPN configuration, and have only set up a handful of site-to-site VPN's with no 'fancy' features and haven't really dealth with SSLVPN too much.
I recently got asked if there was a way to prevent remote access users from being able to establish an SSLVPN connection if they lacked certain virus protection software (like MSE or ForeFront). The person who asked me about this also mentioned that he thought some pre-existing configs may already exist that do this in our environment.
The only immediate thing I've seen is the threat-detection feature, and to shun hosts based off of various threat-detection statistics, and I've found out how to verify those settings. If there is a way to check/accomplish what has been requested by my co-worker I'd love to know about it!
Thanks in advance for any insight/direction on this topic.
User Experience Enhancements
As part of the Cisco Common User Experience program, we are working towards a more uniform user experience and terminology alignment. This program runs across all Cisco security products.
Early Access introduces a...
This video features a step by step walk through of configuring Cisco AnyConnect on FTD managed by FMC. Timestamps included for certificate installation, Access Control, Licensing, NAT, and Deployment failures.
I am trying to solve a CSR signing issue in a home lab.Can someone clarify this theoretical point? According to Wikipedia: "Before creating a CSR, the applicant first generates a key pair, keeping the private key secret. The...
Threat Response integrates with Cisco's Web Security Appliance (WSA) to provide visibility into web-bourne threats. By adding a Web Security or SMA Web module to Threat Response, investigators will be able to search for domains, URLs, and file hashes th...
I was helping some friends and they were trying to solve a scalable VPN issues, specially these days with the pandemic situation.
I recommended to implement ASA VPN Load-Balancing.
This will allow to keep 1 FQDN for all RA-VPN users an...