can we have anyconnect on ASA CLUSTER WITH LOCAL CA

[fbmecardservices]

HAVE 2 5512X ASA configured as cluster, is it doable to have anyconnect configured on the cluster and have local CA.  noticed that the remote vpn tab is missing in the asdm when cluster is enabled and LOCAL CA is missing too

[Karsten Iwen]

No, that's not supported. When you change from Cluster to Active/Standby Failover you at least have Remote-Access VPNs (but still no local CA). And for Certificates, I would use an internal CA like Windows Server or even a different 2nd factor like tokens.

[fbmecardservices]

ok if we use an external CA can we still do the anyconnect with ASA setup as cluster

[Karsten Iwen]

no, that's not supported (yet). But it's on the roadmap for a later release. At least that's what I've heard ...