SSL VPN with RSA authentication

chevymannie · ‎12-30-2008

I have a new ASA and I want to setup clientless VPN. I want to be able to authenticate it using my RSA device that uses key fobs for authentication. I've been browsing the forums and I see that you can do this using a MS IAS server to send the authentication request to the RSA device. Does anyone have a document or can anyone tell me how this can be done?

jbayuka · ‎01-05-2009

The ASA has three areas were RSA SecurID Authentication can be enabled. They are IPSEC VPN, Web SSL VPN and Firewall.

RSA has an inbuilt RADIUS server (you may need to enable it). So configure AAA server and authentication on the router and set the client authentication to this radius server.

Configuring Clientless SSL VPN:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/webvpn.html