CHAPTER
1-1
Cisco ASA Series CLI Configuration Guide
1
Configuring Clientless SSL VPN
This chapter describes how to configure clientless SSL VPN and includes the following sections:
• Information About Clientless SSL VPN, page 1-1
• Licensing Requirements, page 1-2
• Prerequisites for Clientless SSL VPN, page 1-4
• Guidelines and Limitations, page 1-4
• Configuring Application Profile Customization Framework, page 1-11
• Using Single Sign-on with Clientless SSL VPN, page 1-16
• Encoding, page 1-33
• Configuring Connection Profile Attributes for Clientless SSL VPN, page 1-35
• Understanding How KCD Works, page 1-45
• Configuring Application Access, page 1-51
• Configuring Port Forwarding, page 1-63
• Application Access User Notes, page 1-70
• Configuring File Access, page 1-73
• Ensuring Clock Accuracy for SharePoint Access, page 1-77
• Using Clientless SSL VPN with PDAs, page 1-77
• Using E-Mail over Clientless SSL VPN, page 1-77
• Configuring Portal Access Rules, page 1-79
• Clientless SSL VPN End User Setup, page 1-83
• Configuring Browser Access to Client-Server Plug-ins, page 1-99
• Changing a Group Policy or User Attributes to Use the Customization Object, page 1-118
• Capturing Data, page 1-119
Information About Clientless SSL VPN
Note When the ASA is configured for clientless SSL VPN, you cannot enable security contexts (also called
firewall multimode) or Active/Active stateful failover. Therefore, these features become unavailable.