WebVPN - wrong_url.html

[fsanchez]

Hi, I've a client that need access to some intranet URL (Ej https://intranet/doc/document.docx) and I want to use webvpn feature, but I have a problem when the client is not previously authenticate, he received the message "wrong url". Is there any way to modify the wrong_url.html to redirect to login page when this happen?

[nkarthikeyan]

Hi,

I believe that cannot be possible. You access that intranet URL from internet and it can work only when you connect through VPN with successful authentication. Then only it can access the intranet URL, which is resolved by your VPN defined DNS. Without VPN you do not have any authorized connectivity to reach the intranet sites.... your question is unusual and in-secured method.

Regards

Karthik

[fsanchez]

Hi, I think you misunderstood my question, I have deployed a WebVPN on Cisco ASA that publish some intranet and the problem are that when remote user reach the Public IP (Ej https://200.XXX.XXX.XXX) they get the logon page, but if they trying to reach https://200.XXX.XXX.XXX/documents/doc.txt they get the error wrong url instead of the logon page. I think that WebVPN should offer the logon page for authentication and then redirect to original URL.

[nkarthikeyan]

Hi,

I do not think so you can do anything for that..... because the web vpn authentication url, which you have set in your ASA will return the authentication page.... even though you access the same ip/url with a different extension, it will redirect to the wrong-url.html. If you want to bind the different url's, then you need to add that well for the profiles..... and dns registration....

say different tunnel-groups with different group-url pointing to it....

example:

tunnel-group testssl type remote-access
tunnel-group testssl general-attributes
 address-pool vpn
 default-group-policy testssl
tunnel-group testssl webvpn-attributes
 group-url https://networks.com/a2bdftshsln

!

tunnel-group testssl type remote-access
tunnel-group testssl general-attributes
 address-pool vpn
 default-group-policy testssl
tunnel-group testssl webvpn-attributes
 group-url https://networks.com/a2BgyDZtAECz

Regards

Karthik