Clientless SSL VPN

Unanswered Question
Feb 24th, 2009
User Badges:

Hi i have configured web vpn on cisco asa 5510, and able to access Exchange server for OWA.additionally i have Fortigate and fortinalyzer in the same inside lan same as exchange server.However i cannot access them.when access fortinalyzer, login page appear, uopn log in it display server the case of Fortigate, it doesnot evenprompt the log in screen.(Fortigate firewall operate as transparent proxy).I just need to know where ASA web VPN support only web servers and not every HTTP(S)or i am missing some thing.

Please help.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
auraza Thu, 02/26/2009 - 13:43
User Badges:
  • Cisco Employee,

What is the version of the ASA you're running?

auraza Thu, 02/26/2009 - 13:58
User Badges:
  • Cisco Employee,

Clientless functionality on that version was quite limited, and as there is re-writing involved, it can cause issues. 8.0 has much improved clientless functionality and may be worth a look, however, it does require you to buy additional licenses, as only 2 are allowed by default, unless you already have bought licenses for webvpn.

Let me know if that helps.

janakamolagoda Thu, 02/26/2009 - 14:12
User Badges:

Thanks for the advise,

we will buy additional license later if this success.My problem is why i cannot access fortigate where as i can access exchange OWA.

is it something to do with SSL cert or Fortiget block traffic from ASA.(Both Fortinet and exchange server in the same segment)


auraza Fri, 02/27/2009 - 05:16
User Badges:
  • Cisco Employee,

The only thing I can think of is that the Fortigate is not allowing the traffic from the ASA. I have never worked on a Fortigate, but make sure you are allowing management of it from the ASA's internal IP.


This Discussion