cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
610
Views
0
Helpful
1
Replies

WebVPN Browser Caching and Security Implications

wmeisner
Level 1
Level 1

This is the title of a section in the 4.1 release notes. It explains some of the issues of using a shared Internet resource such as a kiosk. The last sentence (see below) addresses a concern I have but I can't find the referenced bug id possibly due to it being Cisco confidential. Can anyone provide some insight and pointers regarding this?

Here's the excerpt from the release notes....It is not necessary to clear your browser web cache after logging out of a WebVPN session because pages downloaded during the session are not cached (CSCec78671).

1 Reply 1

gfullage
Cisco Employee
Cisco Employee

This bug is really just a documentation bug which is why it's not publicly viewable. It basically just describes how we need to document the client behaviour so that people are aware of the security implications.

The bug fix is to provide a page when the user logs out telling them what they need to do to clean out all the cookies and downloaded files (pages visited are not cached so nothing needed to be done for that.)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: