We want to (as easily as possible) change the client config. Specificly the IP address' on the client to point to a name (10.10.10.10 now to vpn.company.com)
This is in the PCF files of the PC, we have a large number of clients spread out all over the globe. We can script the change for an automated push to clients or even alter logon scripts...BUT
If possible it would be nice to be able to have the clients notified when connecting to the concentrator that there is an update needed and automat doing it. I've looked around the site and seen where than "upgrade" can be pushed to the client (usermgt.pdf). This however appears to be for a "real" version upgrade (i.e. 3.2 to 3.5 using Cisco install exe). I can compile a single exe to copy the 2 PCF files needed to the PC... Can this be called as part of the "Configuration | User Management | Groups | Client Update |
Re: Push of concentrator change to client PC's...??
Centralized Protection Policy (CPP) also known as firewall push policy, lets a network administrator define a set of rules for allowing or dropping Internet traffic while the VPN Client is tunneled in to the VPN Concentrator. A network administrator defines this policy on the VPN Concentrator, and the policy is sent to the VPN Client during connection negotiation. The VPN Client passes the policy to the Cisco Integrated Client, which then enforces the policy. If the client user has already selected the "Always On" option, any more restrictive rules are enforced for Internet traffic while the tunnel is established.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :