×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.
Marvin Rhoads Wed, 07/02/2014 - 09:34
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

When the client browses to the ASA outside address (using a web browser via https) and authenticates, the pkg file will download automatically and install on the client PC. (The pkg format is simply a compressed archive file - you can open it and see the binaries inside if you inspect it with something like 7-zip.)

They will need local administrator privilege to allow the install but other than that, it is all automatic as long as you have it setup on the ASA per the document you attached.

tolinrome tolinrome Wed, 07/02/2014 - 11:26
User Badges:

In ASDM under "AnyConnect Connection Profiles" I have the check box to enable cisco anyconnect vpn client on the interfaces selected below - but when I select the "Allow access" on the inside interface for SSL access it gives an error when trying to apply the config because I have ezvpn setup on this 5505.

If I select "Allow access" for IPSEC (ikev2) it allows me and I even created a self-signed certificate which uses the ASA's hostname and that doesnt connect.

I'm just simply trying to get any connect installed on a laptop to test some things.

tolinrome tolinrome Wed, 07/02/2014 - 11:41
User Badges:

Is it even possible to connect to a 5505 using anyconnect webvpn if the 5505 is connected to a 5510 with ezvpn?

If not, I'd be interested in knowing how I can get the anyconnect vpn client installed (any way possible).

thanks.

Marvin Rhoads Wed, 07/02/2014 - 12:24
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

An ASA 5505 should be able to act as both an SSL VPN server as well as an EasyVPN client. It would be a bit of an odd configuration since those features are seldom used together.

If all you need to do is install the AnyConnect VPN client (independent of anything having to do with your 5505) then you can just download the ISO file from cisco.com (the current version would be "anyconnect-win-3.1.05170-pre-deploy-k9.iso" - link) and open the archive (e.g. with 7-zip, Winzip etc.) and run the setup file.

tolinrome tolinrome Wed, 07/02/2014 - 12:48
User Badges:

I might end up doing that, but I would need to associate it with the profile in the 5505 somehow. This is for test purposes only, thats why I didn't chose the 5510 as the ssl vpn server but the 5505. 

Actions

This Discussion