Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Push of concentrator change to client PC's...??

Hello,

We want to (as easily as possible) change the client config. Specificly the IP address' on the client to point to a name (10.10.10.10 now to vpn.company.com)

This is in the PCF files of the PC, we have a large number of clients spread out all over the globe. We can script the change for an automated push to clients or even alter logon scripts...BUT

If possible it would be nice to be able to have the clients notified when connecting to the concentrator that there is an update needed and automat doing it. I've looked around the site and seen where than "upgrade" can be pushed to the client (usermgt.pdf). This however appears to be for a "real" version upgrade (i.e. 3.2 to 3.5 using Cisco install exe). I can compile a single exe to copy the 2 PCF files needed to the PC... Can this be called as part of the "Configuration | User Management | Groups | Client Update |

Add or Modify"?

Such as:

Client Type = Windows

URL = http://intranet/vpn/vpndnsv1.exe

Revisions = vpndnsv1

The exe is a scripted file copy of pcf files needed for config change.

Will this work?

Will clients get prompted for update and if they do it not get prompted again?

Thanks!!

Anthony

1 REPLY
Silver

Re: Push of concentrator change to client PC's...??

Centralized Protection Policy (CPP) also known as firewall push policy, lets a network administrator define a set of rules for allowing or dropping Internet traffic while the VPN Client is tunneled in to the VPN Concentrator. A network administrator defines this policy on the VPN Concentrator, and the policy is sent to the VPN Client during connection negotiation. The VPN Client passes the policy to the Cisco Integrated Client, which then enforces the policy. If the client user has already selected the "Always On" option, any more restrictive rules are enforced for Internet traffic while the tunnel is established.

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_administration_guide_chapter09186a00800bd98c.html

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_tech_note09186a0080094341.shtml

118
Views
0
Helpful
1
Replies
CreatePlease login to create content