SSL Vpn & Cisco VPN Client

gandhi.ganesh · ‎10-20-2008

Hi,

We are in process of setting up the new infrastructre with 5520 series FW, with VPN for our customers

1. can i configure the SSl vpn & Client based vpn is same fw. If yes how?

2. after connecting to SSL vpn (https), is it possible to open my application using http://example.com

Please respond ASAP, ii is very important for me

andrew.prince · ‎10-21-2008

To answer you questions:-

1) Yes - see the attached link for ALL config examples:-

2) Yes - you would have to config "bookmarks" for the specific service/application

HTH>

gandhi.ganesh · ‎10-21-2008

Thx, i will try & let u know

gandhi.ganesh · ‎10-21-2008

Hi,

with the help of ur link, I configured the SSL VPN (SVC). i able to connect but the web application (http://x.x.x.x ) is not able to open.

Please help I am running short of time for this project.

andrew.prince · ‎10-22-2008

Did you actually follow the config example, you have to configure other options to allow access thru the SSL session.

if you just try and connect via another browser window, or over write the URL in the current session it will NOT work.

It all has to be part of the same SSL session. Read the below URL:-

HTH>

gandhi.ganesh · ‎10-22-2008

andrew,

Now I am able to connect to ssl vpn(SVC) & application also.

At the same i am able to do RDP to the appl server, i want to block this how do i do?

andrew.prince · ‎10-22-2008

You need to disable the RDP Java Applete or Deny RDP in the SSl session.

HTH>

gandhi.ganesh · ‎10-22-2008

You mean to say create the ACL in WEB VPN for blocking rdp

andrew.prince · ‎10-22-2008

What device do you have?

What version of IOS are you running?

gandhi.ganesh · ‎10-22-2008

I have configured it on 5505 FW which is 7.2(3). let me know u required any config output

andrew.prince · ‎10-22-2008

I did not know that you could allow RDP from the URL bar in 7.x - I thought the functionality was introduced in version 8.x

Are you using clientless, thin-client or full client SSL access?

gandhi.ganesh · ‎10-22-2008

I have configured SSl VPN Client (SVC)

andrew.prince · ‎10-22-2008

Which is the full client - so yes you will have to configure some kind of ACL to block RDP traffic.

HTH>

gandhi.ganesh · ‎10-22-2008

Thks, really helpful

andrew.prince · ‎10-22-2008

np - glad to help.