radius

The video covers one of the key solution components of Duo Security, which is an Authentication Proxy. We will outline its uses, go through an installation on a Windows server, and review available configuration options on its config file.

The video demonstrates different ways that you can deploy client-based certificate authentication for remote access VPN with Cisco Secure Client (AnyConnect) on Cisco Firepower 7.0. Some of things that we will be configuring include tunnel-group selection, certificate mapping, username selection, authorization against Cisco ISE, and dual-factor authentication with certificate and AD credential. We will be testing all these features on a Windows client.

The video demonstrates different ways that you can deploy client-based certificate authentication for remote access VPN with Cisco Secure Client (AnyConnect) on Cisco Firepower 7.0. Some of things that we will be configuring include tunnel-group selection, certificate mapping, username selection, authorization against Cisco ISE, and dual-factor authentication with certificate and AD credential. We will be testing all these features on a Windows client.

The video demonstrates different ways that you can deploy client-based certificate authentication for remote access VPN with Cisco Secure Client (AnyConnect) on Cisco Firepower 7.0. Some of things that we will be configuring include tunnel-group selection, certificate mapping, username selection, authorization against Cisco ISE, and dual-factor authentication with certificate and AD credential. We will be testing all these features on a Windows client.

The video explores three additional aspects of AnyConnect client VPN configuration on Cisco Firepower 7.0. First, we will expand on a use of RADIUS attributes to control a VPN connection settings. Second, we will configure split-tunneling to select VPN traffic of interest. Third, we will enhance VPN security with tunnel filter to limit the type of traffic allowed over a VPN connection.

The video explores three additional aspects of AnyConnect client VPN configuration on Cisco Firepower 7.0. First, we will expand on a use of RADIUS attributes to control a VPN connection settings. Second, we will configure split-tunneling to select VPN traffic of interest. Third, we will enhance VPN security with tunnel filter to limit the type of traffic allowed over a VPN connection.

The video explores three additional aspects of AnyConnect client VPN configuration on Cisco Firepower 7.0. First, we will expand on a use of RADIUS attributes to control a VPN connection settings. Second, we will configure split-tunneling to select VPN traffic of interest. Third, we will enhance VPN security with tunnel filter to limit the type of traffic allowed over a VPN connection.

The video looks at three different options to assign an IP address to AnyConnect VPN client on Cisco Firepower 7.0. The first option uses a local IP pool on individual FTD. The second option uses a centralized DHCP server to allow a common IP pool for multiple FTDs. The third options uses a RADIUS attribute for IP assignment, which we will test a local ISE user and an AD user.

The video looks at three different options to assign an IP address to AnyConnect VPN client on Cisco Firepower 7.0. The first option uses a local IP pool on individual FTD. The second option uses a centralized DHCP server to allow a common IP pool for multiple FTDs. The third options uses a RADIUS attribute for IP assignment, which we will test a local ISE user and an AD user.

The video demonstrates various methods to authenticate FMC and FTD user on Cisco Firepower 7.0. We will start with local user authentication and progress into external authentication using LDAP with Microsoft AD, RADIUS with Cisco ISE, and SAML SSO with Azure AD. With each method, role mapping will be used to assign different access privileges to user based on group membership.