Cisco Cisco ASA 5555-X Adaptive Security Appliance 기술 매뉴얼

다운로드
페이지 24
Cisco Secure Desktop (CSD 3.1.x) on ASA 7.2.x for
Windows Configuration Example using ASDM
Document ID: 70633
Contents
Introduction
 Prerequisites
      Requirements
      Components Used
      Conventions
 Background Information
      Network Diagram
 Configure CSD on the ASA for Windows Clients
      Obtain, Install, and Enable the CSD Software
      Define Windows Locations
      Windows Location Identification
      Configure Windows Location Module
      Configure Windows Location Features
      Optional Configurations for Windows CE, Macintosh, and Linux Clients
 Configure
      Configuration
 Verify
      Commands
 Troubleshoot
      Commands
 Related Information
Introduction
Cisco Secure Desktop (CSD) extends the security of SSL VPN technology. CSD provides a separate partition
on a user's workstation for session activity. This vault area is encrypted during sessions and completely
removed at the end of an SSL VPN session. Windows can be configured with the full security benefits of
CSD. Macintosh, Linux, and Windows CE have access only to the Cache Cleaner, Web Browsing, and File
Access features. CSD can be configured for Windows, Macintosh, Windows CE, and Linux devices on these
platforms:
Cisco Adaptive Security Appliance (ASA) 5500 Series
• 
Cisco routers that run Cisco IOS
®
 Software Releases 12.4(6)T and later
• 
Cisco VPN 3000 Series concentrators Version 4.7 and later
• 
Cisco WebVPN Module on Catalyst 6500 and 7600 Series routers
• 
Note: CSD Release 3.3 now lets you configure Cisco Secure Desktop to run on remote computers that run
Microsoft Windows Vista. Previously, Cisco Secure Desktop was limited to computers that ran Windows XP
or 2000. Refer to the New Feature Enhancement − Secure Desktop on Vista section of the Release Notes for
Cisco Secure Desktop, Release 3.3, for more information.
This example primarily covers the installation and configuration of CSD on the ASA 5500 Series for
Windows clients. Optional configurations for Windows CE, Mac, and Linux clients are added for
completion.