Can SSLVPN Phones work without an ASA?

[TeejMonster]

I have been trying to set up SSL VPN phones on a 3845 with CME8.6, but I've not been having much luck.  Is an ASA necessary for this to work?

[Mateusz Pagacz]

Not only ASA is supported. You can use IOS device as well:

https://supportforums.cisco.com/document/46346/cisco-ip-phone-anyconnect-vpn-ios

[TeejMonster]

The instructions you included have instructions for IOS with a CUCM phone system.  I have CUCME.  Currently, there is no place for me to assign a vpn-group to an ephone in CUCME's web interface or via the command interface.

Are you saying that with just CUCME8.6 on a C3845 that I can configure SSLVPN for SCCP phones?

[TeejMonster]

I'm following this document:

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmevpn.html

Under my ephone config, I cannot enter a vpn-group or vpn-profile command.  These options also do not appear in the CME gui.

[Jaime Valencia]

Yes, an ASA is necessary to terminate the VPN connections at your office.

[TeejMonster]

Are you saying that without an ASA, there is no way to configure SSLVPN SCCP phones with CUCME8.6 on a C3845?