Security

The video demonstrates different ways that you can deploy client-based certificate authentication for remote access VPN with Cisco Secure Client (AnyConnect) on Cisco Firepower 7.0. Some of things that we will be configuring include tunnel-group selection, certificate mapping, username selection, authorization against Cisco ISE, and dual-factor authentication with certificate and AD credential. We will be testing all these features on a Windows client.

The video shows you how to authenticate remote VPN user using Cisco Secure Client (AnyConnect) against a LDAP server on Cisco Firepower 7.0. Active Directory will be used in the demonstration. We will explain a concept of attribute mapping to allows AD user attributes to dictate characteristics of the VPN connection.

The video shows you how to authenticate remote VPN user using Cisco Secure Client (AnyConnect) against a LDAP server on Cisco Firepower 7.0. Active Directory will be used in the demonstration. We will explain a concept of attribute mapping to allows AD user attributes to dictate characteristics of the VPN connection.

The video explores three additional aspects of AnyConnect client VPN configuration on Cisco Firepower 7.0. First, we will expand on a use of RADIUS attributes to control a VPN connection settings. Second, we will configure split-tunneling to select VPN traffic of interest. Third, we will enhance VPN security with tunnel filter to limit the type of traffic allowed over a VPN connection.

The video explores three additional aspects of AnyConnect client VPN configuration on Cisco Firepower 7.0. First, we will expand on a use of RADIUS attributes to control a VPN connection settings. Second, we will configure split-tunneling to select VPN traffic of interest. Third, we will enhance VPN security with tunnel filter to limit the type of traffic allowed over a VPN connection.

The video explores three additional aspects of AnyConnect client VPN configuration on Cisco Firepower 7.0. First, we will expand on a use of RADIUS attributes to control a VPN connection settings. Second, we will configure split-tunneling to select VPN traffic of interest. Third, we will enhance VPN security with tunnel filter to limit the type of traffic allowed over a VPN connection.

The video looks at three different options to assign an IP address to AnyConnect VPN client on Cisco Firepower 7.0. The first option uses a local IP pool on individual FTD. The second option uses a centralized DHCP server to allow a common IP pool for multiple FTDs. The third options uses a RADIUS attribute for IP assignment, which we will test a local ISE user and an AD user.

The video looks at three different options to assign an IP address to AnyConnect VPN client on Cisco Firepower 7.0. The first option uses a local IP pool on individual FTD. The second option uses a centralized DHCP server to allow a common IP pool for multiple FTDs. The third options uses a RADIUS attribute for IP assignment, which we will test a local ISE user and an AD user.

The video dives deeper into the concepts of Connection Profile and Group Policy in AnyConnect (Cisco Secure Client) VPN on Cisco Firepower 7.0. We will start with local user authentication before progressing to RADIUS authentication with Cisco ISE. We will look at two ways to map a user VPN connection to a group policy: static and dynamic assignment via RADIUS attribute.

The video dives deeper into the concepts of Connection Profile and Group Policy in AnyConnect (Cisco Secure Client) VPN on Cisco Firepower 7.0. We will start with local user authentication before progressing to RADIUS authentication with Cisco ISE. We will look at two ways to map a user VPN connection to a group policy: static and dynamic assignment via RADIUS attribute.