Cisco Cisco ASA 5555-X Adaptive Security Appliance Manual Técnica

Descargar
Página de 21
Conventions
For more information on document conventions, refer to the Cisco Technical Tips Conventions.
Background Information
In order to start a session, the remote client opens an SSL browser to the outside interface of the ASA. After
the session is established, the user can use the parameters configured on the ASA to invoke any Telnet or
application access. The ASA proxies the secure connection and allows the user access to the device.
Note:  Inbound access lists are not necessary for these connections because the ASA is already aware of what
constitutes a legal session.
Thin−Client SSL VPN Configuration using ASDM
In order to configure Thin−Client SSL VPN on the ASA, complete these steps:
Enable WebVPN on the ASA
1. 
Configure Port Forwarding Characteristics
2. 
Create a Group Policy and Link it to the Port Forwarding List (created in Step 2)
3. 
Create a Tunnel Group and Link it to the Group Policy (created in Step 3)
4. 
Create a User and Add That User to the Group Policy (created in Step 3)
5. 
Step 1. Enable WebVPN on the ASA
In order to enable WebVPN on the ASA, complete these steps:
Within the ASDM application, click Configuration, and then click VPN.
1. 
Expand WebVPN, and choose WebVPN Access.
2.