IPSEC Client - Verify Registry Key

[Cory Peterson]

Hello,

I am trying to look for a certain registry key to allow access through IPSEC VPN.

I know I can do this with CSD on the Anyconnect Client, but need to be able to do this with IPSEC also.

What I am trying to do is ensure the client computer is part of the domain before it is allowed to connect.

Thank You,

Cory Peterson

[Federico Coto Fajardo]

Hi,

At least as far as I'm aware, the capacity to scan the remote computer is a feature of SSL-based VPN.

With IPsec you can configure the server to allow only certain versions of IPsec VPN clients for example, but I've not seen an option to scan the host for some registry keys like with CSD/Host scan.

Federico.

[Cory Peterson]

So my only option would be to setup NAC for the IPSEC vpn tunnels, and this would require a NAC device on the inside for the ASA to talk to correct?

[Federico Coto Fajardo]

Well I think it will be the best option yes... and propably the most expensive as well...

Federico.