Cisco ASA Series User Manual

1-36
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Clientless SSL VPN
Configuring Group Policy and User Attributes for Clientless SSL VPN
Configuring Group Policy and User Attributes for Clientless
SSL VPN
Table 1-4 provides a list of group policy and user attributes for clientless SSL VPN. For step-by-step
instructions on configuring group policy and user attributes, see “Configuring Group Policies” and
“Configuring Attributes for Individual Users” or in Chapter 1, “Configuring Connection Profiles, Group
Policies, and Users.”
.
group-alias
Specifies the alternate names by which the server can refer to a
connection profile.
group-url
Identifies one or more group URLs. If you establish URLs with this
attribute, this group is selected automatically for users when they
access using these URLS.
dns-group
Identifies the DNS server group that specifies the DNS server name,
domain name, name server, number of retries, and timeout values.
help
Provides help for tunnel group configuration commands.
hic-fail-group-policy
Specifies a VPN feature policy if you use the Cisco Secure Desktop
Manager to set the Group-Based Policy attribute to “Use Failure
Group-Policy” or “Use Success Group-Policy, if criteria match.”
no
Removes an attribute value pair.
override-svc-download
Overrides downloading the group-policy or username attributes
configured for downloading the AnyConnect VPN client to the
remote user.
pre-fill-username
Configures username to certificate binding on this tunnel-group.
proxy-auth
Identifies this tunnel-group as a specific proxy authentication tunnel
group.
radius-reject-message
Enables the display of the RADIUS reject message on the login
screen when authentication is rejected.
secondary-pre-fill-username
Configures the secondary username to certificate binding on this
tunnel-group.
without-csd
Disables CSD for a tunnel group.
Table 1-3 Connection Profile Attributes for Clientless SSL VPN
Command Function
Table 1-4 Group Policy and User Attributes for Clientless SSL VPN
Command Function
activex-relay
Lets a user who has established a clientless SSL VPN session use the browser
to launch Microsoft Office applications. The applications use the session to
download and upload ActiveX. The ActiveX relay remains in force until the
clientless SSL VPN session closes.
auto-signon
Sets values for auto signon, which requires only that the user enter username
and password credentials only once for a clientless SSL VPN connection.
customization
Assigns a customization object to a group-policy or user.

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English