03-11-2010 03:05 AM - edited 02-21-2020 04:32 PM
Are there any issues in running Cisco AnyConnect and Clientless SSL-VPN alongside each other??
I am currently looking into adding AnyConnect functionality to an ASA that has currently configured to run Clientless SSL-VPN. The Clientless system will not be removed. I know how to configure it, I am wondering if someone has already configured this or if there are any issue with this setup?
Solved! Go to Solution.
03-11-2010 05:01 AM
Hi Daniel
It's a bit tricky if you want a granular authentication and authorization, but it works.
I'm running an ASA with IPSec, SSL Client and Clientless SSL.
Each of those VPNs with username/one-time-password and certificate based authen.
The main challenge is to build up a clean structure of Profile Maps, Connection Profiles, Group Policies and Dynamic Access Policies.
Feel free to ask further questions...
Stephan
03-11-2010 07:13 AM
I've tested this and you can do. I had both setup on my ASA.
03-11-2010 05:01 AM
Hi Daniel
It's a bit tricky if you want a granular authentication and authorization, but it works.
I'm running an ASA with IPSec, SSL Client and Clientless SSL.
Each of those VPNs with username/one-time-password and certificate based authen.
The main challenge is to build up a clean structure of Profile Maps, Connection Profiles, Group Policies and Dynamic Access Policies.
Feel free to ask further questions...
Stephan
03-11-2010 07:13 AM
I've tested this and you can do. I had both setup on my ASA.
03-15-2010 03:23 AM
Thank you very much for your answers I will be implementing this in the next few days hopefully I will not run into any issues
Thanks for your help
Dan
03-27-2013 05:10 PM
Hi Stephan,
Is there any document showing how to do it?
I have some anyconnect profile configured and I enabled clientless connection on them.
But when I access the URL https://"asa address" the ASA send me straight to anyconnect instalation.
If the profile is enable for anyconnect and clientless is ther a way to choose which way to connect?
Thanks!
03-28-2013 06:52 AM
In group Policy edit > Advanced > AnyConnect CLient > Login Settings
Prompt user to choose
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide