Cisco ASA 5505 Configuration Manual page 1478

Configuring Session Settings
•
•
If you configure one method for a range of servers (for example, HTTP Basic) and one of those servers
Note
attempts to authenticate with a different method (for example, NTLM), the adaptive security appliance
does not pass the user login credentials to that server.
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Configuring Session Settings
The clientless SSL VPN Add/Edit Internal Group Policy > More Options > Session Settings window lets
you specify personalized user information between clientless SSL VPN sessions. By default, each group
policy inherits the settings from the default group policy. Use this window to specify personalized
clientless SSL VPN user information for the default group policy and any group policies for which you
want to differentiate these values.
Fields
•
Cisco ASA 5500 Series Configuration Guide using ASDM
67-14
Mask—From the subnet mask menu, choose the subnet mask that defines the server address
–
range of the servers supporting auto signon.
URI—Click this button to specify a server supporting auto signon by URI, then enter the URI in the
field next to this button.
Authentication Type—The authentication method assigned to the servers. For the specified range of
servers, the adaptive security appliance can be configured to respond to Basic HTTP authentication
requests, NTLM authentication requests, FTP and CIFS authentication requests, or requests using
any of these methods.
Basic—Click this button if the servers support basic (HTTP) authentication.
–
NTLM—Click this button if the servers support NTLMv1 authentication.
–
FTP/CIFS—Click this button if the servers support FTP and CIFS authentication
–
Basic, NTLM, and FTP/CIFS—Click this button if the servers support all of the above.
–
Security Context
Transparent Single
—
•
User Storage Location—Click none or choose the file server protocol (smb or ftp) from the
drop-down menu. If you choose smb or ftp, use the following syntax to enter the file system
destination into the adjacent text field:
username:password@host:port-number/path
For example
mike:mysecret@ftpserver3:2323/public
Multiple
Context System
— —
Chapter 67 Clientless SSL VPN
OL-20339-01