how to maintain SSL anyconnect remote access vpn tunnel to be always up

[donnie]

Hi,

I would like to know how to maintain SSL anyconnect client vpn tunnel to my cisco asa 5520 ver 8.2 to be always up?

So that it is not disconnected due to idle timeout or sa lifetime.

By default dead peer detection for both client and gateway side are enabled. This feature should ensure that my client's vpn tunnel is always up as long as my WAN link is up  right? I also need to set my idle timeout to unlimited right? Other than these 2 settings any other settings required? Pls advise. Thk you.

[Javier Portuguez]

Hi Don,

You could also consider the Always-On feature:

Always-on VPN Requirements

Let me know.

Portu.

Please rate any helpful posts.

[donnie]

Hi Javier,

Apologies for late reply. My ASDM ver6.2 does not have the "anyconnect client profile" link. I have already loaded my anyconnect image under "remote access vpn->network client access->advanced->ssl vpn->client settings->anyconnect client images". Pls advise.

[Javier Portuguez]

Hi Don,

I encourage you to update the ASDM version to the latest one.

Please check this out:

http://tools.cisco.com/squish/da304

Then you should be able to see the profile.

Let me know how it goes.

Portu.

Please rate any helpful posts