anyconnect

The video shows you how to utilize the endpoint posture information gathered during a host scan to enforce access to Cisco ASA AnyConnect VPN through Dynamic Access Policy (DAP). We will perform various checks on the status of client Antivirus software and firewall combining with the pre-login policy results from the previous lab and alter VPN access accordingly. You will learn the effect that DAP has on both AnyConnect client and clientless VPN.

The video shows you how to utilize the endpoint posture information gathered during a host scan to enforce access to Cisco ASA AnyConnect VPN through Dynamic Access Policy (DAP). We will perform various checks on the status of client Antivirus software and firewall combining with the pre-login policy results from the previous lab and alter VPN access accordingly. You will learn the effect that DAP has on both AnyConnect client and clientless VPN.

The video takes you through the Cisco ASA AnyConnect VPN abilities to gather VPN client information using Hostscan and basic Endpoint Assessment features. We will be deploying a Hostscan agent as part of an AnyConnect Posture module, and creating a pre-login policy from device registry and OS checks to categorize the endpoint and allow or deny VPN access accordingly. The video finishes with enabling Host Scan extension as a preparation to the next lab video.

The video takes you through the Cisco ASA AnyConnect VPN abilities to gather VPN client information using Hostscan and basic Endpoint Assessment features. We will be deploying a Hostscan agent as part of an AnyConnect Posture module, and creating a pre-login policy from device registry and OS checks to categorize the endpoint and allow or deny VPN access accordingly. The video finishes with enabling Host Scan extension as a preparation to the next lab video.

The video demonstrates different ways that you can leverage client-based certificate authentication with Cisco ASA AnyConnect VPN. Some of things that we will be configuring includes certificate attribute mapping to tunnel-group, authorization against Cisco ISE, dual-factor authentication with certificate and AD credential, and finally, secondary authentication. These are inherent features to the AnyConnect VPN. Additional certificate features related to AnyConnect Secure Mobility will be explored in the future videos.

The video demonstrates different ways that you can leverage client-based certificate authentication with Cisco ASA AnyConnect VPN. Some of things that we will be configuring includes certificate attribute mapping to tunnel-group, authorization against Cisco ISE, dual-factor authentication with certificate and AD credential, and finally, secondary authentication. These are inherent features to the AnyConnect VPN. Additional certificate features related to AnyConnect Secure Mobility will be explored in the future videos.

The video shows you an ability to integrate Cisco ASA with LDAP server (here we use Active Directory) and perform user attribute to RADIUS attribute mapping for Cisco AnyConnect VPN configuration. We will step through the entire process of assigning VPN parameters to an AD user, identifying the corresponding LDAP attributes, and map them to desired RADUS attributes. This is another alternative to those that do not own a RADIUS server.

The video helps you centralize your Cisco ASA AnyConnect VPN client group-policy configuration to your RADIUS server in case you would like to maintain configuration consistency on multiple ASA VPN devices. We will convert the group-policy configured in the previous lab into RADIUS attributes and, in addition, push out a Downloadable ACL (DACL). We will also demonstrate how per-user authorization still overwrites the configuration received from the group-policy. 

The video walks you through a basic setup of Cisco ASA AnyConnect client VPN that will serve as a foundation configuration of our subsequent labs. This includes supporting configuration such as routing, NAT, address pool, and default group-policy. We will have a working VPN setup that matches the traditional IPSec remote user VPN at the end of this lab.