Hide Group Profile in AnyConnect

fatalXerror · ‎02-08-2015

Hi Experts,

Good day!

I have an ASA with ISE 1.2 as the RADIUS server. May I know how can I hide the Group profiles in the drop-down menu of the AnyConnect if we are using ISE 1.2? I only know how to do it when the credentials are just in LOCAL.

Thank you for the help.

cheers,

niks

Karsten Iwen · ‎02-09-2015

That has nothing to do if the Authentication is done locally or over RADIUS.

Just disable the drop-down on the ASA:

asa# conf t
asa(config)# webvpn
asa(config-webvpn)# no tunnel-group-list enable

Just make sure that your users connect to the right tunnel-group. That can be the default-tunnel-group or be selected by the group-url:

tunnel-group VPN webvpn-attributes
 group-url https://vpn.example.com/vpn enable