03-16-2017 09:40 AM - edited 02-21-2020 09:11 PM
Hi
we have implemented RA VPN with AnyConnect. The AnyConnect Software and Profile are deployed by SCCM on end users computers.
Now we have a Word document, in layman language, that will tell the end users what to do in case they are unable to connect for whatever reason it may be. So the question is:
When a user tries to connect to VPN with AnyConnect client and the connection fails:
1. Is there a way to create a link on anyconnect client GUI, which will open our above mentioned word document?
OR
2. If we store this Document on our Sharepoint then is there a way, that when the anyconnect connection fails, irrespective of the reason, a pop up box appears that tells the user to goto Sharepoint and read the document.
I think something like this must be possible with Customization/Localization ??
Thanks and Regards,
R
03-16-2017 11:59 AM
You could allow clientless VPN access and create a connection profile that points to an internal URL. Client would still have to authenticate (LOCAL, AAA, whatever). The connection profile would appear in a drop down menu or you could have the client go to a specific URL <secure.mycompany.com/help>
03-17-2017 01:47 AM
Hi Michael,
unfortunately that is not an option. The requirement from the "management" people is very specific. A Link on AnyConnect Message box or AnyConnect Client GUI that will point to help document or open the help document.
T&R,
R
03-17-2017 05:50 AM
You can use DAP to send message if a particular DAP is selected (say the default DAP policy). But is usually only when all your DAP checks fails - AV or LDAP group etc.
You can modify the Anyconnect GUI messages, but I am not sure if it will display a clickable link at that point:
http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect44/administration/guide/b_AnyConnect_Administrator_Guide_4-4/customize-localize-anyconnect.html
03-17-2017 05:52 AM
Sorry that is not an option. It would seem perfect if you want a rather comprehensive document presented to the user. The user would still have to authenticate.
So your other option is to customize Anyconnect. You can customize messages, logos and present a help file.
The directions to do so are in this document:
<http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/customize-localize-anyconnect.html#ID-1408-000002d9>
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide