Secure desktop on ASA

Unanswered Question
Jul 21st, 2007
User Badges:

Does anyone know of a way that i can turn on Secure desktop for on group policy and not turn it on for another one? Meaning if i login as one group policy SD wont run, if i login as another it will download an run

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (3 ratings)
ggilbert Sun, 07/22/2007 - 15:44
User Badges:
  • Cisco Employee,

On the group-policy you can not specify that CSD should be enabled or disabled.

But, on the CSD manager you specify a criteria to check by registry or IP address and if that fails, then you can attach it to a group-policy for that failure.



shaun.white Sun, 07/22/2007 - 17:31
User Badges:

Right...what i was asking was if someone knew of a workaround...if you cant pish a registry key to the machines, and they are internet VPN remote users, the IP address could be those checks go out the think it makes more sense to say per group policy to enable or disable it...

ggilbert Mon, 07/23/2007 - 06:53
User Badges:
  • Cisco Employee,


CSD is enabled globally. So, when the webvpn page login is done, the CSD will be launched.

At that time, the CSD criterion is checked. On the group-policy, you can't configure this.

- Gilbert


This Discussion