ASA, block clientless VPN but enable SecureClient

[paul-d]

Hi,

I'm sure it has been asked before but on the 9.18 release of the ASA code, is it possible to stop people from bring able to browse to my anyconnect login page, but still keep the SSL VPN capability via the secure client.

Currently, I have it in maintenance mode however ideally I don't want to display a webpage at all, just have the user connect via Secure Client. 

[MHM Cisco World]

Under 

Webvpn 

Use 

Keepout  <<- this command disable clientless

MHM

[paul-d]

Hi There,

I have the keepout command in there currently and while this does stop people from logging in there is still a browseable web page, is there any way of getting rid of the web page altogether? 

[MHM Cisco World · Accepted solution]

Sorry I don't have idea how you totally make web page disappear.

MHM

[Rob Ingram]

@paul-d you can use the "keepout" command to disable the WebVPN but still allow connections via anyconnect/secure client.

webvpn
 keepout "No access"