Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

New Member

VPN ssl client

Can we configure our VPN concentrator to automatically update the VPN SSL client to the desktop. We want to switch from the VPN client to VPN SSL client using CA certificates. We have 2 concentrators still our network until we are able to upgrade to ASA's.

Thanks.

Spencer Plantier

3 REPLIES

Re: VPN ssl client

Hi,

You mean Cisco VPN Client (IPSec) to be updated by Cisco SSL VPN Client? Cisco SSL VPN concentrator can be configured to download the SSL VPN Client automatically and install permanently/temporary.

Both Cisco VPN Client and Cisco SSL VPN Client can co-exist and use either one (not both), I don't think either one can update/remove anyone of them.

I have not used CA Certificate though.

Here are their directories if choosing the default;

1. Cisco VPN Client

C:\Program Files\Cisco Systems\VPN Client

2. Cisco SSL VPN Client

C:\Program Files\Cisco Systems\SSL VPN Client

They have different libraries and executables.

Regards,

Dandy

New Member

Re: VPN ssl client

What we to do is install the webvpn client on the clients box. Then when an upgrade is available to have that upgrade just downloaded to the client. Then on VPN box have the certificate come from an internal RSA box.

Re: VPN ssl client

Hi,

In VPN Box's "Configuration + VPN + General + Group Policy + DfltGrpPolicy + WebVPN + SSL VPN Client + Keep Installer on Client System + Yes" will keep the SSL VPN Client installer on the clients box (i.e. version 1.1.3.x). When a new version of SSL VPN Client installer is available (i.e. version 1.1.4.x) load it to your VPN Box and in your VPN Box's "Configuration + VPN + WebVPN + SSL VPN Client + Enable SSL VPN Client + SSL VPN Client Images" add the new image which is 1.1.4.x in example. When the user is successfully authenticated, the new version will be automatically downloaded and install/update the old version on clients box.

About the certificate, do you mean you are using Certificate not AAA in VPN Box's "Configuration + VPN + General + Tunnel Group + Custom_Tunnel_Group or DefaultWEBVPNGroup + WebVPN + Basic"? If so, I haven't tried Certificate only AAA.

Regards,

Dandy

276
Views
0
Helpful
3
Replies
CreatePlease to create content