Cisco FirePOWER ASA 5500 series Configuration Manual page 701

Chapter 37 Configuring WebVPN
An example POST request—with host HTTP header and body—follows:
POST
/emco/myemco/authc/forms/MCOlogin.fcc?TYPE=33554433&REALMOID=06-000430e1-7443-125c-ac05-83
846dc90034&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=$SM$5FZmjnk3DRNwNjk2KcqVCFbIrNT9%2b
J0H0KPshFtg6rB1UV2PxkHqLw%3d%3d&TARGET=https%3A%2F%2Fwww.example.com%2Femco%2Fmyemco%2F
HTTP/1.1
Host: www.example.com
(BODY)
SMENC=ISO-8859-1&SMLOCALE=US-EN&USERID=Anyuser&USER_PASSWORD=XXXXXX&target=https%3A%2F%2Fw
ww.example.com%2Femco%2Fmyemco%2F&smauthreason=0
Examine the POST request and copy the protocol, host, and the complete URL to configure the action-uri
Step 4
parameter.
Examine the POST request body and copy the following:
Step 5
a. Username parameter. In the preceding example, this parameter is USERID, not the value anyuser.
Password parameter. In the preceding example, this parameter is USER_PASSWORD.
b.
Hidden parameter. This parameter is everything in the POST body except the username and
c.
password parameters. In the preceding example, the hidden parameter is:
SMENC=ISO-8859-1&SMLOCALE=US-EN&target=https%3A%2F%2Fwww.example.com%2Fe
mco%2Fmyemco%2F&smauthreason=0
Figure 37-2
from an HTTP analyzer. This is only an example; output varies widely across different websites.
Figure 37-2
1
2
If you successfully log in to the web server, examine the server response with the HTTP header analyzer
Step 6
to locate the name of the session cookie set by the server in your browser. This is the auth-cookie-name
parameter.
OL-10088-01
highlights the action URI, hidden, username and password parameters within sample output
Action-uri, hidden, username and password parameters
3
1
Action URI parameter
2 Hidden parameters
3 Username and password parameters
Cisco Security Appliance Command Line Configuration Guide
Getting Started with WebVPN
37-11