smart tunnel restriction

ofir-nissim · ‎07-04-2010

hi all,

is there a way to limit smart tunnel per resource?

when a bookmark is used with smart tunnel the relay plugin tunnel all the requests from that browser , i would like to limit that

Jason Gervia · ‎07-05-2010

You can do this in ASA 8.(3)1, using smart tunnel tunnel policies:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/webvpn.html#wp1343034

But beware of all the NAT changes that occur in 8.3(1).

--Jason

ofir-nissim · ‎07-05-2010

any chance to do that with code 8.0?

Jason Gervia · ‎07-06-2010

You can filter access to internal resources, but if you want to not smart tunnel all the resources for that particular browser, you'd have to use 8.3(1).

--Jason

dbgreekas · ‎07-06-2010

jagervia wrote:

You can do this in ASA 8.(3)1, using smart tunnel tunnel policies:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/webvpn.html#wp1343034

But beware of all the NAT changes that occur in 8.3(1).

--Jason

Also don't forget to quadruple your RAM from 512 to 2GB.. It is mandatory for 8.3...