cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
340
Views
0
Helpful
4
Replies
Highlighted
Beginner

How to pre-choose (default) the tunnel-group for AnyConnect?

Hi Everyone,

I am new to Cisco AnyConnect VPN

There are 3 tunnel-groups i have setup as attached.  Because the AnyConnect VPN is for mobile users, and i want the end-user experience to be as seamless as possible.  Is there a way that i can "pre-select/choose" the "COS" for the mobile users? (as i do not want any user intervention when they use AnyConnect on their mobile)

 

Attached is the AnyConnect login screenshot and my ASA config.

Would appreciated someone could shed some light onto this.

 

PS:  I am using local database for authentication, but the certificate method will be used and the certificate does work (have tested it with mobile).

 

Cheers,

Lee

Login screen.png

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Mentor

Re: How to pre-choose (default) the tunnel-group for AnyConnect?

4 REPLIES 4
Highlighted
VIP Mentor

Re: How to pre-choose (default) the tunnel-group for AnyConnect?

Highlighted
Beginner

Re: How to pre-choose (default) the tunnel-group for AnyConnect?

Spoiler
 

Hi there,

I look through the section but I must be very newbie.

Would you be able to pinpoint to me which attribute/setting do i need to "pre-choose" that setting (rather than letting user to choose from a list?)

Cheers,

Lee

Highlighted
VIP Mentor

Re: How to pre-choose (default) the tunnel-group for AnyConnect?

Do you have any MDM in place to Manage these Mobile devive ?

 

what Mobile devive is this ? Apple or Android ?

 

BB
*** Rate All Helpful Responses ***
Highlighted
Beginner

Re: How to pre-choose (default) the tunnel-group for AnyConnect?

Hi Balaji,

They are some IOS and some Android, so both.

They will be managed by Microsoft InTune, but Intune rely on Cisco AnyConnect for the VPN.

Even with InTune, I don't see inside InTune any options for pre-selecting which tunnel-group the mobile will be login with on VPN as this is an AnyConnect setting, isn't it?

Any help would be greatly appreciated.

Cheers,

Lee