Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-10
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring AnyConnect VPN Client Connections
Guidelines and Limitations
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Remote PC System Requirements
For the requirements of endpoint computers running the AnyConnect Secure Mobility Client, see the
release notes for the AnyConnect client version you are deploying with the ASA.
Remote HTTPS Certificates Limitation
The ASA does not verify remote HTTPS certificates.
Configuring AnyConnect Connections
This section describes prerequisites, restrictions, and detailed tasks to configure the ASA to accept
AnyConnect VPN client connections, and includes the following topics:
• Configuring the ASA to Web-Deploy the Client, page 1-11
• Enabling Permanent Client Installation, page 1-12
• Configuring DTLS, page 1-13
• Prompting Remote Users, page 1-13
• Enabling AnyConnect Client Profile Downloads, page 1-14
• Enabling Additional AnyConnect Client Features, page 1-17
• Enabling Start Before Logon, page 1-17
• Translating Languages for AnyConnect User Messages, page 1-18
• Configuring Advanced AnyConnect SSL Features, page 1-20
• Updating AnyConnect Client Images, page 1-23
4. The AnyConnect Essentials license enables AnyConnect VPN client access to the ASA. This license does not support browser-based SSL VPN access or
Cisco Secure Desktop. For these features, activate an AnyConnect Premium license instead of the AnyConnect Essentials license.
Note: With the AnyConnect Essentials license, VPN users can use a Web browser to log in, and download and start (WebLaunch) the AnyConnect client.
The AnyConnect client software offers the same set of client features, whether it is enabled by this license or an AnyConnect Premium SSL VPN Edition
license.
The AnyConnect Essentials license cannot be active at the same time as the following licenses on a given ASA: AnyConnect Premium license (all types)
or the Advanced Endpoint Assessment license. You can, however, run AnyConnect Essentials and AnyConnect Premium licenses on different ASAs in
the same network.
By default, the ASA uses the AnyConnect Essentials license, but you can disable it to use other licenses by using the no anyconnect-essentials command.
For a detailed list of the features supported by the AnyConnect Essentials license and AnyConnect Premium license, see AnyConnect Secure Mobility
Client Features, Licenses, and OSs:
http://www.cisco.com/en/US/products/ps10884/products_feature_guides_list.html

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English