Cisco ASA Series Cli Configuration Manual page 1914

Communicating Security Tips
Requiring Usernames and Passwords
Depending on your network, during a remote session users might have to log in to any or all of the
following: the computer itself, an Internet service provider, clientless SSL VPN, mail or file servers, or
corporate applications. Users might have to authenticate in many different contexts, requiring different
information, such as a unique username, password, or PIN.
Table 1-10
Table 1-10
Login Username/
Password Type
Computer
Internet Service Provider
Clientless SSL VPN
File Server
Corporate Application Login Access firewall-protected internal
Mail Server
Communicating Security Tips
Advise users to always click the logout icon on the toolbar to close the clientless SSL VPN session.
(Closing the browser window does not close the session.)
Clientless SSL VPN ensures the security of data transmission between the remote PC or workstation and
the ASA on the corporate network. Advise users that using clientless SSL VPN does not ensure that
communication with every site is secure. If a user then accesses a non-HTTPS web resource (located on
the Internet or on the internal network), the communication from the corporate ASA to the destination
web server is not private because it is not encrypted.
"Observing Clientless SSL VPN Security Precautions" on page 5
communicate with users, depending on the steps you follow within that section.
Configuring Remote Systems to Use Clientless SSL VPN
Features
This section describes how to set up remote systems to use clientless SSL VPN and includes the
following topics:
•
•
Cisco ASA Series CLI Configuration Guide
1-106
lists the type of usernames and passwords that clientless SSL VPN users might need to know.
Usernames and Passwords to Give to Users of Clientless SSL VPN Sessions
Starting Clientless SSL VPN, page 1-107
Using the Clientless SSL VPN Floating Toolbar, page 1-107
Purpose
Access the computer
Access the Internet
Access remote network
Access remote file server
server
Access remote mail server via
clientless SSL VPN
Chapter 1 Configuring Clientless SSL VPN
Entered When
Starting the computer
Connecting to an Internet service
provider
Starting clientless SSL VPN
Using the clientless SSL VPN file
browsing feature to access a
remote file server
Using the clientless SSL VPN web
browsing feature to access an
internal protected website
Sending or receiving e-mail
messages
addresses an additional tip to