Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

SA540 SSL VPN Questions

I have just installed a new SA540 which replaced an PIX 506 that died last week.  I have configured it for SSL VPN access.  Everything is working with a few exceptions:

1. Our user accounts include spaces and I am unable to add users to the Active Directory group as it does not allow spaces so I have created accounts in the default SSLVPN group.  How do I add users to the Active Directory group whose account names contain spaces or periods?

2. Mac users are able to access the SSL VPN Portal and get to the Client page.  However one there they can not install the VPN applet as they are prompted for the password of the privledged user and no local passwords seem to work.  All of the Mac users are local administrators and I assume that the applet is using sudo in the background.  How can they install the applet and what password is the applet looking for?  Is there another way for Macs to access the SSL VPN?

15% of the users have Macs and are now unable log on to the VPN.

Everyone's tags (4)

Re: SA540 SSL VPN Questions

What version of OS are you running? I tried this on a Mac OS X 10.5.8 Intel MacBook Pro and it worked for me.  The administrator password worked, but that box is only setup to use one password.

I am asking some developers about the Active Directory question.

Also, what browser are you using?

New Member

Re: SA540 SSL VPN Questions

They are all MacBook Pros running Snow Leopard (10.6).  I found out that the root account is disabled by default on Macs and must be enabled to install the applet. ( The lack of support for 64 bit OS is also a problem for the Vista users at home.

One of the driving factors in choosing this device over the SonicWall device was the name Cisco and the supposed support of Active Directory authentication so my real problem is the spaces in the account names.  I wanted to use the AD for authentication so as to not need to create a local user database, but I had to do that anyway, which was a real pain.

New Member

Re: SA540 SSL VPN Questions

The Mac users are now able to connect but for some reason it only works in Full Tunnel mode for them but it works in Split Tunnel mode for everyone else.

PC users with IE 8 and those with 64 bit Vista can not install the VPN applet.

Help, Please!

CreatePlease to create content