anyconnection encryption

[WILLIAM STEGMAN]

Where does an anyconnection session on an ASA pull its encryption method from?  Looks like the default is 3DES, but I can't find where in the config the encryption method gets applied.  The transform set I'm using for IPSec isn't being applied to anyconnect clients.

thank you,

Bill

[pcarco · Accepted solution]

Hello,

Configuration > Remote Access VPN > Advanced> SSL Settings

"The ASA uses the Secure Sockets Layer (SSL) protocol and its successor, Transport Layer Security (TLS) to support secure message transmission for ASDM, Clientless, VPN, and browser-based sessions. The SSL Settings window lets you configure SSL versions and encryption algorithms for clients and servers. It also lets you apply previously configured trustpoints to specific interfaces, and to configure a fallback trustpoint for interfaces that do not have an associated trustpoint."

Source:  ASDM online help.

Best regards,

Paul

[Marvin Rhoads]

You can also make Anyconnect (version 3+) use IPsec with IKEv2. Specify IPsec as the protocol on the profile (xml file) and set it up as usual and enable it on the outside interface.

Here's a screenshot from my AnyConnect client when connected thus (click to enlarge):