Cisco 5505 - ASA Firewall Edition Bundle Manuals

Table of Contents

• • 3

    Table of Contents
  • 8

    About This Guide
    • 8

      Related Documentation
    • 8

      Document Organization
    • 9

      Document Conventions
    • 10

      Obtaining Documentation, Obtaining Support, and Security Guidelines
    • 10

      Licensing

• 11

  Chapter 1 Introduction

  • 11

    AnyConnect Client Features
  • 12

    Remote User Interface
  • 17

    Getting and Installing the Files You Need
    • 17

      CSA Interoperability With the AnyConnect Client and Cisco Secure Desktop

• 19

  Chapter 2 Common AnyConnect VPN Client Installation and Configuration Procedures

  • 19

    Installing the AnyConnect Client
  • 20

    Before You Install the AnyConnect Client
    • 20

      Ensuring Automatic Installation of AnyConnect Clients
    • 21

      AnyConnect Client and New Windows Installations
    • 21

      Adding a Security Appliance to the List of Trusted Sites (Internet Explorer)
    • 22

      Adding a Security Certificate in Response to Browser Security Alert Windows
    • 25

      Replacing a Digital Certificate With a Trusted Certificate
  • 26

    Installing the AnyConnect Client On a User's PC
    • 26

      Where to Find the AnyConnect Client Files to Install
    • 26

      Windows 8
    • 27

      Installing the AnyConnect Client On a PC Running Linux
    • 27

      Installing the AnyConnect Client On a PC Running MAC OSX

• 29

  Chapter 3 Installing the AnyConnect Client and Configuring the Security Appliance With ASDM

  • 39

    Installing the AnyConnect Client On a Security Appliance Using CLI
    • 40

      Enabling AnyConnect Client SSL VPN Connections Using CLI
    • 42

      Disabling Permanent Client Installation
    • 43

      Enabling Datagram Transport Layer Security (DTLS) With AnyConnect (SSL) Connections
      • 44

        Configuring DTLS
      • 45

        Enabling Datagram Transport Layer Security (DTLS) With AnyConnect (SSL) Connections
    • 46

      Prompting Remote Users
    • 47

      Enabling IPv6 VPN Access
    • 47

      Enabling Modules for Additional AnyConnect Features
    • 48

      Configuring, Enabling, and Using Other AnyConnect Features
      • 48

        Configuring Certificate-only Authentication
      • 51

        Using Compression
        • 52

          Changing Compression Globally
        • 52

          Changing Compression for Groups and Users
      • 53

        Enabling AnyConnect Keepalives
      • 54

        Enabling AnyConnect Rekey
      • 56

        Enabling and Adjusting Dead Peer Detection
      • 57

        Configuring the Dynamic Access Policies Feature of the Security Appliance
      • 57

        Cisco Secure Desktop Support
      • 60

        Enabling DTLS Globally for a Specific Port
      • 60

        Enabling DTLS for Specific Groups or Users
    • 60

      Prompting Remote Users
    • 61

      Enabling IPv6 VPN Access
    • 62

      Enabling Modules for Additional AnyConnect Features
    • 63

      Configuring, Enabling, and Using Other AnyConnect Features
    • 63

      Configuring Certificate-only Authentication
    • 63

      Using Compression
    • 64

      Configuring the Dynamic Access Policies Feature of the Security Appliance
    • 64

      Cisco Secure Desktop Support
    • 64

      Enabling AnyConnect Rekey
    • 65

      Enabling and Adjusting Dead Peer Detection
    • 66

      Enabling AnyConnect Keepalives

• 67

  Chapter 7 Configuring and Using AnyConnect Client Operating Modes and User Profiles

  • 67

    AnyConnect Client Operating Modes
    • 67

      Using the AnyConnect CLI Commands to Connect (Standalone Mode)
    • 69

      Connecting Using WebLaunch
    • 70

      User Log in and Log Out
      • 70

        Logging in
      • 70

        Logging Out
  • 70

    Configuring and Using User Profiles
    • 71

      Enabling AnyConnect Client Profile Downloads
  • 76

    Configuring Profile Attributes
    • 77

      Enabling Start before Logon (SBL) for the AnyConnect Client
      • 77

        XML Settings for Enabling SBL
      • 77

        CLI Settings for Enabling SBL
    • 78

      Configuring the ServerList Attribute
    • 78

      Configuring the Certificate Match Attribute
      • 78

        Certificate Key Usage Matching
      • 79

        Extended Certificate Key Usage Matching
      • 79

        Certificate Distinguished Name Mapping
      • 81

        Certificate Matching Example

• 83

  Chapter 8 Customizing and Localizing the AnyConnect Client

  • 83

    Customizing the End-user Experience
    • 85

      Language Translation (Localization) for User Messages
      • 85

        Understanding Language Translation
      • 86

        Configuring Language Localization Using ASDM
      • 88

        Creating or Modifying a Translation Table Using ASDM
      • 89

        Import/Export Language Localization
      • 90

        Creating or Modifying a Translation Table Using CLI
    • 96

      Adjusting MTU Size Using ASDM
    • 96

      Adjusting MTU Size Using CLI
    • 97

      Logging Off AnyConnect Client Sessions
    • 98

      Updating AnyConnect Client and SSL VPN Client Images

• 99

  Appendix

  • 99

    Sample AnyConnect Profile and XML Schema
    • 99

      Sample AnyConnect Profile