Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA VPN and anti-virus / firewall checking

Does the ASA VPN or ASA Any Connect have the ability to check for anti-virus and/or firewall stuff from the connecting endpoint? I know there was limited support with the dedicated VPN concentrators such as the 3020 but need to know if this support is in the ASA and if so to what extent. I am having limited success in finding this out from teh configuration guides and examples on CCO.

Everyone's tags (5)
1 ACCEPTED SOLUTION

Accepted Solutions
New Member

For Cisco ASA and ISE

For Cisco ASA and ISE products capable of performing a registry/process check on the endpoint device, you can use a solution from OPSWAT called GEARS.  GEARS will check and report on the compliance of endpoints with respect to:

1) applications designed to protect it such as antivirus, personal firewalls, antiphishing, hard disk encryption, patch management, etc.

2) potentially unwanted applications such as public file sharing

3) whether or not the endpoint is infected with malware

GEARS can be configured to take remediation actions such as:

1) enabling a disabled firewall or antivirus application

2) disabling an unwanted application such as public file sharing

A HowTo Guide providing step-by-step instructions for ASA and ISE administrators to configure a registry/process check to read GEARS compliance information is posted at https://gears.opswat.com/integration/secure-access

2 REPLIES
Cisco Employee

Re: ASA VPN and anti-virus / firewall checking

Hey,

Yes the solution you are looking for is Dynamic Access Policies aka DAP. You will find all relevant information regarding DAP deployment at the following link:

http://www.cisco.com/en/US/products/ps6120/products_white_paper09186a00809fcf38.shtml

Hope that helps.

Regards,

Atri

New Member

For Cisco ASA and ISE

For Cisco ASA and ISE products capable of performing a registry/process check on the endpoint device, you can use a solution from OPSWAT called GEARS.  GEARS will check and report on the compliance of endpoints with respect to:

1) applications designed to protect it such as antivirus, personal firewalls, antiphishing, hard disk encryption, patch management, etc.

2) potentially unwanted applications such as public file sharing

3) whether or not the endpoint is infected with malware

GEARS can be configured to take remediation actions such as:

1) enabling a disabled firewall or antivirus application

2) disabling an unwanted application such as public file sharing

A HowTo Guide providing step-by-step instructions for ASA and ISE administrators to configure a registry/process check to read GEARS compliance information is posted at https://gears.opswat.com/integration/secure-access

3121
Views
0
Helpful
2
Replies
CreatePlease login to create content