Cisco 5505 - ASA Firewall Edition Bundle Manuals

Table of Contents

• • 3

    Table of Contents
  • 8

    About This Guide
    • 8

      Related Documentation
    • 8

      Document Organization
    • 9

      Document Conventions
    • 10

      Obtaining Documentation, Obtaining Support, and Security Guidelines
    • 10

      Licensing

• 11

  Chapter 1 Introduction

  • 11

    Anyconnect Client Features
  • 12

    Remote User Interface
  • 17

    Getting and Installing the Files You Need
    • 17

      CSA Interoperability with the Anyconnect Client and Cisco Secure Desktop

• 19

  Chapter 2 Common Anyconnect VPN Client Installation and Configuration Procedures

  • 19

    Installing the Anyconnect Client
  • 20

    Before You Install the Anyconnect Client
    • 20

      Ensuring Automatic Installation of Anyconnect Clients
    • 21

      Anyconnect Client and New Windows Installations
    • 21

      Adding a Security Appliance to the List of Trusted Sites (Internet Explorer)
    • 22

      Adding a Security Certificate in Response to Browser Security Alert Windows
    • 25

      Replacing a Digital Certificate with a Trusted Certificate
  • 26

    Installing the Anyconnect Client On a User's PC
    • 26

      Where to Find the Anyconnect Client Files to Install
    • 26

      Windows 8
    • 27

      Installing the Anyconnect Client On a PC Running Linux
    • 27

      Installing the Anyconnect Client On a PC Running MAC OSX

• 29

  Chapter 3 Installing the Anyconnect Client and Configuring the Security Appliance with ASDM

  • 39

    Installing the Anyconnect Client On a Security Appliance Using CLI
    • 40

      Enabling Anyconnect Client SSL VPN Connections Using CLI
    • 42

      Disabling Permanent Client Installation
    • 43

      Enabling Datagram Transport Layer Security (DTLS) with Anyconnect (SSL) Connections
      • 44

        Configuring DTLS
      • 45

        Enabling Datagram Transport Layer Security (DTLS) with Anyconnect (SSL) Connections
    • 46

      Prompting Remote Users
    • 47

      Enabling Ipv6 VPN Access
    • 47

      Enabling Modules for Additional Anyconnect Features
    • 48

      Configuring, Enabling, and Using Other Anyconnect Features
      • 48

        Configuring Certificate-Only Authentication
      • 51

        Using Compression
        • 52

          Changing Compression Globally
        • 52

          Changing Compression for Groups and Users
      • 53

        Enabling Anyconnect Keepalives
      • 54

        Enabling Anyconnect Rekey
      • 56

        Enabling and Adjusting Dead Peer Detection
      • 57

        Configuring the Dynamic Access Policies Feature of the Security Appliance
      • 57

        Cisco Secure Desktop Support
      • 60

        Enabling DTLS Globally for a Specific Port
      • 60

        Enabling DTLS for Specific Groups or Users
    • 60

      Prompting Remote Users
    • 61

      Enabling Ipv6 VPN Access
    • 62

      Enabling Modules for Additional Anyconnect Features
    • 63

      Configuring, Enabling, and Using Other Anyconnect Features
    • 63

      Configuring Certificate-Only Authentication
    • 63

      Using Compression
    • 64

      Configuring the Dynamic Access Policies Feature of the Security Appliance
    • 64

      Cisco Secure Desktop Support
    • 64

      Enabling Anyconnect Rekey
    • 65

      Enabling and Adjusting Dead Peer Detection
    • 66

      Enabling Anyconnect Keepalives

• 67

  Chapter 7 Configuring and Using Anyconnect Client Operating Modes and User Profiles

  • 67

    Anyconnect Client Operating Modes
    • 67

      Using the Anyconnect CLI Commands to Connect (Standalone Mode)
    • 69

      Connecting Using Weblaunch
    • 70

      User Log in and Log Out
      • 70

        Logging in
      • 70

        Logging Out
  • 70

    Configuring and Using User Profiles
    • 71

      Enabling Anyconnect Client Profile Downloads
  • 76

    Configuring Profile Attributes
    • 77

      Enabling Start before Logon (SBL) for the Anyconnect Client
      • 77

        XML Settings for Enabling SBL
      • 77

        CLI Settings for Enabling SBL
    • 78

      Configuring the Serverlist Attribute
    • 78

      Configuring the Certificate Match Attribute
      • 78

        Certificate Key Usage Matching
      • 79

        Extended Certificate Key Usage Matching
      • 79

        Certificate Distinguished Name Mapping
      • 81

        Certificate Matching Example

• 83

  Chapter 8 Customizing and Localizing the Anyconnect Client

  • 83

    Customizing the End-User Experience
    • 85

      Language Translation (Localization) for User Messages
      • 85

        Understanding Language Translation
      • 86

        Configuring Language Localization Using ASDM
      • 88

        Creating or Modifying a Translation Table Using ASDM
      • 89

        Import/Export Language Localization
      • 90

        Creating or Modifying a Translation Table Using CLI
    • 96

      Adjusting MTU Size Using ASDM
    • 96

      Adjusting MTU Size Using CLI
    • 97

      Logging Off Anyconnect Client Sessions
    • 98

      Updating Anyconnect Client and SSL VPN Client Images

• 99

  Appendix

  • 99

    Sample Anyconnect Profile and XML Schema
    • 99

      Sample Anyconnect Profile