Customization of clientless SSL-VPN with ASA v8

Unanswered Question
Aug 17th, 2007
User Badges:


there have been significant changes on how the customization of the clientless VPN is done on the ASA with version 8. While before it could be easily done via commands in the configuration (define customization-profiles and assign them to tunnel-groups), with version 8 you have to fiddle around with XML-files which you have to down- and upload to the ASA and ex- and import them on the ASA.

To my mind (and experience so far) this is:

* More complicated and fiddlesome

* badly documented in the configuration guide (really)

* Has significant disadvantage for the hardware-exchange process (which has to be done by relatively uneducated people). Those are used to put a given configuration in a devices (copy-paste job). With the new configuration-paradigma this is not possible any more. You have to copy-paste the configuration of course, but additionally you have to import the customization-profiles (which are NOT part of the configuration)!

* It's not even even capable compared to the versions lower 8. For instance, you can't change the background-color of the login-screen. You could with version 7, but you can't with version 8.

Any other comments, hints, opinions?


Florian Pressler

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion