Proxy for AnyConnect

[network_geek1979]

Guys,

Anyone ever come across a proxy for AnyConnect from a security prospective?

We want to add an additional layer of security, some kind of dual factor for a test node. This is a node which is used for many kind of profile testing and the use case here is we may test some weak authentication as well on this node.

Regards,

N!!

[Rob Ingram]

@network_geek1979 

Do you want a proxy (web proxy?) or two-factor authentication (2FA) solution? I assume you mean the latter.

You can integrate the ASA or FTD into a 2FA solution, Cisco has Duo https://duo.com/docs/cisco

Duo will send either a text message, call you or send a push notification. You can combine this authentication method with your existing AD credentials or certificates. For testing you could configure 2FA against a separate tunnel-group/Connection Profile.

[network_geek1979]

Hi,

Do we have any proxy solutions also?

I just want to look at both of them. i.e. Proxy and 2FA.

Thanks!!

[Rob Ingram]

@network_geek1979 

Cisco WSA which is on-prem proxy or Cisco Umbrella which is cloud based.

[network_geek1979]

Hi Rob,

Thanks, please allow me some time to read through these solutions to check if they are the correct fit.

Regards,

N!!