Cisco ASA 5540 User Manual

1-37
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Clientless SSL VPN
Configuring Browser Access to Plug-ins
Configuring Browser Access to Plug-ins
The following sections describe the integration of browser plug-ins for clientless SSL VPN browser
access:
• Preparing the Security Appliance for a Plug-in, page 1-39
• Installing Plug-ins Redistributed By Cisco, page 1-40
• Providing Access to a Citrix XenApp Server, page 1-42
deny-message
Specifies the message delivered to a remote user who logs into clientless SSL
VPN successfully, but has no VPN privileges.
file-browsing
Enables CIFS file browsing for file servers and shares. Browsing requires
NBNS (Master Browser or WINS).
file-entry
Allows users to enter file server names to access.
filter
Sets the name of the webtype access list.
hidden-shares
Controls the visibility of hidden shares for CIFS files.
homepage
Sets the URL of the web page that displays upon login.
html-content-filter
Configures the content and objects to filter from the HTML for this group
policy.
http-comp
Configures compression.
http-proxy
Configures the ASA to use an external proxy server to handle HTTP requests.
Note Proxy NTLM authentication is not supported in http-proxy. Only
proxy without authentication and basic authentication are supported.
keep-alive-ignore
Sets the maximum object size to ignore for updating the session timer.
port-forward
Applies a list of clientless SSL VPN TCP ports to forward. The user interface
displays the applications on this list.
post-max-size
Sets the maximum object size to post.
smart-tunnel
Configures a list of programs and several smart tunnel parameters to use smart
tunnel.
sso-server
Sets the name of the SSO server.
storage-objects
Configures storage objects for the data stored between sessions.
svc
Configures SSL VPN Client attributes.
unix-auth-gid
Sets the UNIX group ID.
unix-auth-uid
Sets the UNIX user ID.
upload-max-size
Sets the maximum object size to upload.
url-entry
Controls the ability of the user to enter any HTTP/HTTP URL.
url-list
Applies a list of servers and URLs that clientless SSL VPN portal page
displays for end user access.
user-storage
Configures a location for storing user data between sessions.
Table 1-4 Group Policy and User Attributes for Clientless SSL VPN
Command Function

Cisco ASA 5540 Specifications

General

Firewall Throughput	650 Mbps
Maximum Firewall Connections	400, 000
VPN Throughput	225 Mbps
Maximum VPN Peers	5, 000
High Availability	Active/Active, Active/Standby
IPSec VPN Throughput	225 Mbps
Memory	1 GB
IPS Throughput	225 Mbps
Security Contexts	50
Flash Memory	64 MB
Form Factor	1U
Power Supply	Dual
Interfaces	4 x 10/100/1000 Ethernet