Smart Tunnel with MAC OS

[Robert Falconer]

Is it possible to use a Smart Tunnel through the clientless VPN portal on a Macintosh? We use Smart Tunnel with PCs and it works well. But when I try with a Mac, there is no button for 'Start Smart Tunnel'.

It just shows the application 'Firefox' is authorized but has no way to launch the tunnel.

Thanks.

[David Johan Castro Fernandez]

Hi Robert,

It is possible to use Smart tunnel on MAC computers, though as everything it has its own limitations and requirements,

• Safari 3.1.1 or later or Firefox 3.0 or later

• Sun JRE 1.5 or later

• Only applications started from the portal page can establish smart tunnel connections. This requirement includes smart tunnel support for Firefox. Using Firefox to start another instance of Firefox during the first use of a smart tunnel requires the user profile named csco_st. If this user profile is not present, the session prompts the user to create one.

• Applications using TCP that are dynamically linked to the SSL library can work over a smart tunnel.

• Smart tunnel does not support these features and applications on Mac OS:

  • Proxy services

  • Auto sign-on

  • Applications that use two-level name spaces

  • Console-based applications, such as Telnet, SSH, and cURL

  • Applications using dlopen or dlsym to locate libsocket calls

  • Statically linked applications to locate libsocket calls

You can find further information about this, on this link:

(http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/111007-smart-tunnel-asa-00.html#Macreq)

Please don´t forget to rate and mark as correct the helpful post!

David Castro,

Regards,

[Robert Falconer]

I've already read documentation and didn't find it that helpful. I was hoping to get some real-world feedback on anything that was done differently, specifically around the issue that I have of no Smart Tunnel button to press.

The 3rd point doesn't really make sense to me. What portal page? Is that some specific tab on the portal? Should there be the same button to launch the smart tunnel as there is with a Windows OS or is it done some other way?