Cisco ASA 5505 Configuration Manual page 1479

Chapter 67 Clientless SSL VPN
•
•
•
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Java Code Signer
Code signing appends a digital signature to the executable code itself. This digital signature provides
enough information to authenticate the signer as well as to ensure that the code has not been
subsequently modified since signed.
Code-signer certificates are special certificates whose associated private keys are used to create digital
signatures. The certificates used to sign code are obtained from a CA, with the signed code itself
revealing the certificate origin.
Choose a Java Code Signer from the drop down list.
To configure a Java Code Signer, choose Configuration > Remote Access VPN > Certificate
Management > Java Code Signer.
Content Cache
Caching enhances the performance of clientless SSL VPN. It stores frequently reused objects in the
system cache, which reduces the need to perform repeated rewriting and compressing of content. The
use of the cache reduces traffic, with the result that many applications run more efficiently.
Fields
•
OL-20339-01
Although the configuration shows the username, password, and preshared key, the adaptive
Note
security appliance uses an internal algorithm to store the data in an encrypted form to
safeguard it.
Storage Key—Type the string, if required, for the security appliance to pass to provide user access
to the storage location.
Storage Objects—Choose one of the following options from the drop-down menu to specify the
objects the server uses in association with the user. The adaptive security appliance store these
objects to support clientless SSL VPN connections.
cookies,credentials
–
cookies
–
credentials
–
Transaction Size-Enter the limit in KB over which to time out the session. This attribute applies only
to a single transaction. Only a transaction larger than this value resets the session expiration clock.
Security Context
Transparent Single
—
•
Enable cache—Click to enable caching. The default value is disable.
Multiple
Context System
— —
Cisco ASA 5500 Series Configuration Guide using ASDM
Java Code Signer
67-15