ASA 5520 IPSEC VPN - Do not allow Windows XP

[Sighclops]

I have an ASA 5520 being used only for VPN running Cisco Adaptive Security Appliance Software Version 8.2(5)26. I am looking to deny connections from Windows XP Clients who use the Cisco VPN Client (5.0.07.0440). Can this be done with my version and if so how?

[David Johan Castro Fernandez]

Hi,

On this case VPN client does not have posture assessments functionality, since CSD or HostScan would not interoperate with VPN client IPSec, and that was a way to block connections based on OS/AV/MAC address and so on, however VPN client has basic functions using DAP.

If you want to set up a deplyment like that, you will need to move to AnyConnect Secure Mobility Client, like that all the Hostscan along wth DAP will work blocking or allowing based on your policies.

Let me know if you have another questions!

Please proceed to rate and mark as correct the helpful Post!

David Castro,

Regards