Hi, I'm trying to setup a remote access SSL VPN on my FPR1010, but running into trouble. If someone kind could help I'd be grateful. Backstory:
I've been through the RA VPN wizard, these are the things I've done:
- I'm only using SSL
- I've defined a wildcard certificate issued by my organisation
- I've uploaded the Secure Client images for Windows, MacOS and Linux
- I'm using a LOCAL user account (for now)
- I've created an IPv4 address pool
- I've set two internal DNS servers
- I've exempted VPN traffic from NAT
It seems to be a pretty basic setup where I'm using local accounts and although I used the wizard, I had to make some additional config changes, such as enabling WEBVPN on the outside interface.
Problem:
When I try to log into the VPN, the Cisco Secure Client software errors out with a message that says: "Login denied, unauthorised connection mechanism, contact your administrator". Using the Realtime Log Viewer, I can see that my AAA user authentication is successful, but it retrieves the default group policy (DfltGrpPolicy) for my user. I actually created a new Group Policy that I wanted to use, idea being is that I will create another Group Policy when I get around to setting up a different method of authentication via SAML with AzureAD. But for now, I'm just trying to get the local user up and running... And failing!
This is my first post on here and I'm familiar with ASAs but by no means an expert. This is also the first RA VPN that I've set up so please be gentle.
