How to Disable Native Mac IPSEC VPN Access Via Cisco ASA?

[MrDvD_SD_Tech]

hello everyone,

Would anyone be able to offer some info on how to do this, so that we can enforce users to use the Cisco AnyConnect VPN client instead using the built-in Mac IPSec VPN option to VPN in.  Any info would greatly be appreciated, thank you.

MrDvD

[Karsten Iwen]

1. Make sure that all group-policies used for remote-access do not include "ikev1" but only "anyconnect".
2. If there are no more dynamic VPNs (like branch-routers with dynamic IPs), then you can also remove the "crypto dynamic map" configuration.

[MrDvD_SD_Tech]

Hello and thank you!  I will give this a try tomorrow and see if it works and will let you know.   Thank you.