SSL clientless webvpn issue with MAC OS & Linux while Windows is ok

[Nadeem ahmed Ahmed]

Hi,

I am having SSL Clientless WEBVPN issue with MAC & Linux Operating system while it is perfectly working fine with Windows OS (all web browsers IE, Firefox, Sfari etc)

With Linux or MAC OS,

After successfull SSL VPN authentication, when i put credential for server authentication, i get blank page.

I would appreciate if someone share the experince.

Regards

[Herbert Baerten]

Hi Nadeem,

First of all - if you haven't done so already, check if mac/linux hosts can access the application without going through the ASA, i.e. from the inside LAN.

I would suggest you capture the (decrypted) traffic between the browser and the ASA, and between the ASA and the internal server, for both a working (windows) and a failing (mac/linux) attempt, and compare them.

You can also compare the failing capture between ASA and server, to a capture of a working direct session between client and server.

To capture the traffic between the client and the ASA, you can use a tool such as Charles : http://www.charlesproxy.com/documentation/proxying/ssl-proxying/

To capture between the ASA and the server, either use wireshark on the server, or the 'capture' command on the ASA

hth

Herbert

[Nadeem ahmed Ahmed]

I have tested application internally n is working fine over the LAN with linux aswell but when i try to test over SSL webVpn i couldn't get application page.

I just want to verify whether activeX control is support over linux because when i use windows OS it work fine and application worked successfully.

Please let me know if you abt activex control compatibility with Linux n MAC OS.

Thanks

[Herbert Baerten]

Hello Nadeem,

ActiveX is Microsoft Windows only, so if your application works ok on a Linux machine on the LAN, then it is not using ActiveX but probably Java.

So in addition to the suggestions in my previous post, you can

- examine the Java console logs (assuming the application falls back to Java on non-Windows hosts)

-as a possible workaroun for Mac users, smart tunnel the bookmark.

hth

Herbert