ASA smart tunnels traffic being blocked by McAfee SCM appliance

eliu · ‎07-09-2009

We have enabled smart tunnels for a web bookmark defined on our ASA to access a web application developed in-house through clientless web vpn. When our users try to access this bookmark behind a McAfee SCM appliance acting as a proxy from a customer site, McAfee SCM will intercept and block the smart tunnels traffic. How can we get around this problem?

htarra · ‎07-15-2009

To use smart tunnels, you must have the following:

â€¢A browser with either ActiveX or Java and JavaScript.

â€¢32-bit operating system only (you cannot use 32-bit applications on a 64-bit OS).

â€¢Microsoft Windows XP, 2000, or Vista. For Vista, if you are starting smart tunnels from Internet Explorer protected mode, the security appliance must be in the trusted zone.

â€¢If you need a proxy to reach the security appliance, only basic authentication is supported. Also, the remote end (the private side, not the security appliance) must be in the excluded list (or you must configure the application to reach the remote end by its normal address rather than the proxy address).