Anyconnect Auto Connect

[Vishnu Ravindranath]

Hi Team,

We got a requirement is to make the anyconnect to Autoconnect to our network whenever the PC Restarts or the Internet link Disconnects. So is there any way to Remeber the Password in Anyconnect Software and making it to Auto connect whenever there is Distruption in the Network. We are running the latest version Anyconnect 4.X.

Kindly request your expertise advice on this.

Thank you,

-Vishnu

[Rahul Govindan · Accepted solution]

You can use Always On with Trusted Network detection feature of Anyconnect to have the client connect automatically when on an untrusted network.

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect44/administration/guide/b_AnyConnect_Administrator_Guide_4-4/configure-vpn.html#ID-1428-000001c7

Regarding saving password, this is not possible. In order to have a seamless user experience, you would need to use client certificates to authenticate the user instead of username and password authentication.

[Vishnu Ravindranath]

Thanks a lot Rahul !!!

So we will enable the Always ON feature and test with the Certificate Authentication.

We got a Internal CA Server in the network. So to configure the Certificate based authentication,  we need to import the root Certificate in to ASA. And sign the Certificate for individual PC's with this Certificate right ?

Do you have any document for the Certificate Based Authentication and how we can obtain a certificate for the END host.

Thank you,

-Vishnu

[Rahul Govindan]

You are correct. The ASA will have the root cert and end users will have client certificates.

You can use SCEP Proxy feature on the ASA to automate end user certificate enrollment. The Admin guide should have the certificate enrollment configuration steps:

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect44/administration/guide/b_AnyConnect_Administrator_Guide_4-4/configure-vpn.html

Another option is to use GPO to issue client certificates to users.

[Vishnu Ravindranath]

Thanks again, will follow the same and update the status.

Thank you,

-Vishnu

[arunkolathur]

thanks Rahul

[clel]

Since storing the credentials is currently not possible, I created a new question asking for support: https://community.cisco.com/t5/vpn/anyconnect-store-authentication-credentials-for-auto-login/m-p/4538060