DAP vs cut through proxy

Unanswered Question
Feb 16th, 2009


I've configured, in my ASA 5550, cut through proxy with IAS/AD for internal users browsing the Internet and the feature works well.

As soon as I deployed the remote access VPN config which's working with DAP, the cut though proxy stopped working.

Users got error message (error:Dynamic access policy not continue.

How can I disable http request handling by DAP, I want to use DAP and cut though proxy separately.

Thanks for your hints

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Ivan Martinon Mon, 02/16/2009 - 13:46

This is Odd, DAP asks you to choose the application that it will be used for, in your case IPSEC, did you choose this application?

Amadou TOURE Tue, 02/17/2009 - 06:32


For now I removed all policies and I just have the default Access policy and there's no application for it.

Thank you.

Amadou TOURE Tue, 02/17/2009 - 07:38

you have to configure the default action to continue to make it work.

when you configure the default action to terminate the error message is displayed.

Do you have a link or a document that explain how to configure DAP without interfering with cut through proxy ?

Thank you.

Amadou TOURE Tue, 02/17/2009 - 10:29


I want to use DAP with a ipsec VPN client and whenever I create a dynamic policy in CSM, I receive a message asking to activate CSD.

How can I use DAP without CSD ?


Amadou TOURE Tue, 02/17/2009 - 11:48

Yes, CSM 3.2.1 allow you to configure DAP but not the 3.2 version.

How to configure the application in ASDM ? I didn't see a field for the application.

Ivan Martinon Tue, 02/17/2009 - 11:51

ASDM 6.0 should have it under SVC Anyconnect section for remote access, but worry not that does not mean it applies anything to the SVC or anyconnect just seems they find no better place to put it, there is another section which I don't have on top of my head right now.


This Discussion