Cisco ASA 5505 Configuration Manual page 1374

Configuring Clientless SSL VPN Connections
Note
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Add or Edit Clientless or SSL VPN Client Connection Profile or IPsec Connection
Profiles> Advanced > Authentication
The Authentication dialog box lets you view, add, edit, or delete interface-specific authentication server
groups. Each row of the table on this dialog box shows the status of one interface-specific server group:
the interface name, its associated server group, and whether fallback to the local database is enabled if
the selected server group fails.
Fields
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Assign Authentication Server Group to Interface
This dialog box lets you associate an interface with a AAA server group. The results appear in the table
on the Authentication dialog box.
Cisco ASA 5500 Series Configuration Guide using ASDM
64-64
Override account-disabled indication from AAA server—Overrides an account-disabled
–
indication from a AAA server.
Allowing override account-disabled is a potential security risk.
Security Context
Transparent Single
— •
Interface-specific Authorization Server Groups—Manages the assignment of authorization server
groups to specific interfaces.
Add or Edit—Opens the Assign Authentication Server Group to Interface dialog box, in which
–
you can specify the interface and server group, and specify whether to allow fallback to the
LOCAL database if the selected server group fails. The Manage button on this dialog box opens
the Configure AAA Server Groups dialog box. Your selections appear in the Interface/Server
Group table.
– Delete—Removes the selected server group from the table. There is no confirmation or undo.
Security Context
Transparent Single
—
•
Multiple
Context System
— —
Multiple
Context System
— —
Chapter 64 General VPN Setup
OL-20339-01