1-35
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Clientless SSL VPN
Creating and Applying Clientless SSL VPN Policies for Accessing Resources
If you click none or specify a value that the browser on the clientless SSL VPN session does not support,
it uses its own default encoding.
You can type a string consisting of up to 40 characters, and equal to one of the valid character sets
identified in http://www.iana.org/assignments/character-sets. You can use either the name or the alias of
a character set listed on that page. The string is case-insensitive. The command interpreter converts
upper-case to lower-case when you save the ASA configuration.
Creating and Applying Clientless SSL VPN Policies for
Accessing Resources
Creating and applying policies for clientless SSL VPN that govern access to resources at an internal
server includes the following task:
• Assigning Users to Group Policies
Chapter 1, “Configuring Connection Profiles, Group Policies, and Users” includes step-by-step
instructions for all of these tasks.
Assigning Users to Group Policies
Assigning users to group policies simplifies the configuration by letting you apply policies to many
users. You can use an internal authentication server on the ASA or an external RADIUS or LDAP server
to assign users to group policies. See Chapter 1, “Configuring Connection Profiles, Group Policies, and
Users”for a thorough explanation of ways to simplify configuration with group policies.
Configuring Connection Profile Attributes for Clientless
SSL VPN
Table 1-3 provides a list of connection profile attributes that are specific to clientless SSL VPN. In
addition to these attributes, you configure general connection profile attributes common to all VPN
connections. For step-by-step information on configuring connection profiles, see Chapter 1,
“Configuring Connection Profiles, Group Policies, and Users.”
Note In earlier releases, “connection profiles” were known as “tunnel groups.” You configure a connection
profile with tunnel-group commands. This chapter often uses these terms interchangeably.
Table 1-3 Connection Profile Attributes for Clientless SSL VPN
Command Function
authentication
Sets the authentication method.
customization
Identifies the name of a previously defined customization to apply.
exit
Exits from tunnel-group WebVPN attribute configuration mode.
nbns-server
Identifies the name of the NetBIOS Name Service server
(nbns-server) to use for CIFS name resolution.