Cisco 5510 - ASA SSL / IPsec VPN Edition Getting Started Guide

11-5
Cisco ASA 5500 Series Getting Started Guide
78-19186-01
Chapter 11 Scenario: SSL VPN Clientless Connections
Implementing the Clientless SSL VPN Scenario
Information to Have Available
Before you begin configuring the adaptive security appliance to accept remote
access IPsec VPN connections, make sure that you have the following information
available:
• Name of the interface on the adaptive security appliance to which remote
users will connect. When remote users connect to this interface, the SSL VPN
Portal Page is displayed.
• Digital certificate
The ASA 5500 series generates a self-signed certificate by default. For
improved security and to eliminate browser warning messages, you may want
to purchase a publicly trusted SSL VPN certificate before putting the system
in a production environment.
• List of users to be used in creating a local authentication database, unless you
are using a AAA server for authentication.
• If you are using a AAA server for authentication, the AAA Server Group
Name
• The following information about group policies on the AAA server:
– Server group name
– Authentication protocol to be used (TACACS, SDI, NT, Kerberos,
LDAP)
– IP address of the AAA server
– Interface of the adaptive security appliance to be used for authentication
– Secret key to authenticate with the AAA server
• List of internal websites or pages you want to appear on the SSL VPN portal
page when remote users establish a connection. Because this is the page users
see when they first establish a connection, it should contain the most
frequently used targets for remote users.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English