03-13-2014 01:09 PM - edited 02-21-2020 07:33 PM
What are the proper (simplified) steps for enabling Anyconnect on an ASA. Is purchasing a SSL certificate necessary? Thanks.
Solved! Go to Solution.
03-13-2014 03:04 PM
The AnyConnect client is used for either full tunnel SSL VPN or full tunnel IPsec (IKEv2). Either method requires an SSL certificate on your ASA. You can use self-signed, private CA, or public CA / RA as the source of your certificate. Cisco recommends the third option as it will be recognized as a trusted root CA automatically. Option 2 requires your clients import the root certificate from the sigining CA into their trusted root certificates store. Option 1 requires they import the self-signed certificate.
As far as setting it up, you can follow the remote acess VPN wizard in ASDM. If oyou go the public CA SSL certificate route, you should have that in hand ahead of time.
03-13-2014 03:38 PM
03-13-2014 03:04 PM
The AnyConnect client is used for either full tunnel SSL VPN or full tunnel IPsec (IKEv2). Either method requires an SSL certificate on your ASA. You can use self-signed, private CA, or public CA / RA as the source of your certificate. Cisco recommends the third option as it will be recognized as a trusted root CA automatically. Option 2 requires your clients import the root certificate from the sigining CA into their trusted root certificates store. Option 1 requires they import the self-signed certificate.
As far as setting it up, you can follow the remote acess VPN wizard in ASDM. If oyou go the public CA SSL certificate route, you should have that in hand ahead of time.
03-13-2014 03:38 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide