Cisco ASA 5505 Configuration Manual page 1477

Chapter 67 Clientless SSL VPN
particular range of servers. The authentication methods you can configure the adaptive security
appliance to respond to consists of authentication using Basic (HTTP), NTLM, FTP and CIFS, or all of
these methods.
Auto signon is a straight-forward method for configuring SSO for particular internal servers. This
section describes the procedure for setting up SSO with auto signon. If you already have SSO deployed
using Computer Associates SiteMinder SSO server, or if you have Security Assertion Markup Language
(SAML) Browser Post Profile SSO, and if you want to configure the adaptive security appliance to
support this solution, see
Do not enable auto signon for servers that do not require authentication or that use credentials different
Note
from the adaptive security appliance. When auto signon is enabled, the adaptive security appliance
passes on the login credentials that the user entered to log into the adaptive security appliance regardless
of what credentials are in user storage.
Fields
•
•
•
•
•
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Add/Edit Auto Signon Entry
The Add/Edit Auto Signon Entry dialog box lets you add or edit a new auto signon instruction. An auto
signon instruction defines a range of internal servers using the auto signon feature and the particular
authentication method.
Fields
•
OL-20339-01
SSO
IP Address—Display only. In conjunction with the following Mask, displays the IP address range of
the servers to be authenticated to as configured with the Add/Edit Auto Signon dialog box. You can
specify a server using either the server URI or the server IP address and mask.
Mask—Display only. In conjunction with the preceding IP Address, displays the IP address range
of the servers configured to support auto signon with the Add/Edit Auto Signon dialog box.
URI—Display only. Displays a URI mask that identifies the servers configured with the Add/Edit
Auto Signon dialog box.
Authentication Type—Display only. Displays the type of authentication—Basic (HTTP), NTLM,
FTP and CIFS, or all of these methods—as configured with the Add/Edit Auto Signon dialog box.
Add/Edit—Click to add or edit an auto signon instruction. An auto signon instruction defines a range
of internal servers using the auto signon feature and the particular authentication method.
Delete—Click to delete an auto signon instruction selected in the Auto Signon table.
Security Context
Transparent Single
— •
IP Block—Click this button to specify a range of internal servers using an IP address and mask.
IP Address—Enter the IP address of the first server in the range for which you are configuring
–
auto sign-on.
Servers.
Multiple
Context System
— —
Cisco ASA 5500 Series Configuration Guide using ASDM
Auto Signon
67-13