Cisco ASA 5505 Configuration Manual page 1502

Configuring Smart Tunnel Access
Table 67-3
Application list specified
Smart tunnel is disabled
Smart Tunnel all
Applications check box is
checked
Note
Follow these steps to configure tunnel policy.
Choose Configuration > Remote Access VPN > AAA/Local Users > Local Users.
Step 1
In the User Account window, highlight the username that you want to edit.
Step 2
Click Edit. The Edit User Account window appears.
Step 3
In the left sidebar of the Edit User Account window, click VPN Policy > Clientless SSL VPN.
Step 4
Perform one of the following:
Step 5
•
•
Add or Edit Smart Tunnel List
The Add Smart Tunnel List dialog box lets you add to the security appliance configuration a list of
applications that can access smart tunnel. The Edit Smart Tunnel List dialog box lets you modify the
contents of the list.
Field
•
Cisco ASA 5500 Series Configuration Guide using ASDM
67-38
Access for Smart Tunnel Applications and Enabled Bookmarks
This configuration is applicable to Windows platforms only.
Check the smart tunnel_all_applications check box. All applications will be tunneled without
making a list or knowing which executables an end user may invoke for external applications.
Or choose from the following tunnel policy options:
Uncheck the Inherit check box at the Smart Tunnel Policy parameter.
–
– Choose from the network list and specify one of the tunnel options: use smart tunnel for the
specified network, do not use smart tunnel for the specified network, or use tunnel for all
network traffic.
List Name—Enter a unique name for the list of applications or programs. Do not use spaces.
Smart Tunnel Enabled Bookmark
Any processes that match a
process name in the application
list are granted access.
All processes (and their child
processes) are granted access.
All processes (and their child
processes) are granted access.
This includes processes
Note
initiated by non-Smart
Tunnel web pages if the
web page is served by the
same browser process.
Chapter 67 Clientless SSL VPN
Smart Tunnel Application Access
Only processes that match a
process name in the application
list are granted access.
No process is granted access.
All processes owned by the user
who started the browser are
granted access but not child
processes of those original
processes.
OL-20339-01