Security

The video demonstrates different ways that you can leverage client-based certificate authentication with Cisco ASA AnyConnect VPN. Some of things that we will be configuring includes certificate attribute mapping to tunnel-group, authorization against Cisco ISE, dual-factor authentication with certificate and AD credential, and finally, secondary authentication. These are inherent features to the AnyConnect VPN. Additional certificate features related to AnyConnect Secure Mobility will be explored in the future videos.

The video demonstrates different ways that you can leverage client-based certificate authentication with Cisco ASA AnyConnect VPN. Some of things that we will be configuring includes certificate attribute mapping to tunnel-group, authorization against Cisco ISE, dual-factor authentication with certificate and AD credential, and finally, secondary authentication. These are inherent features to the AnyConnect VPN. Additional certificate features related to AnyConnect Secure Mobility will be explored in the future videos.

The video shows you an ability to integrate Cisco ASA with LDAP server (here we use Active Directory) and perform user attribute to RADIUS attribute mapping for Cisco AnyConnect VPN configuration. We will step through the entire process of assigning VPN parameters to an AD user, identifying the corresponding LDAP attributes, and map them to desired RADUS attributes. This is another alternative to those that do not own a RADIUS server.

The video helps you centralize your Cisco ASA AnyConnect VPN client group-policy configuration to your RADIUS server in case you would like to maintain configuration consistency on multiple ASA VPN devices. We will convert the group-policy configured in the previous lab into RADIUS attributes and, in addition, push out a Downloadable ACL (DACL). We will also demonstrate how per-user authorization still overwrites the configuration received from the group-policy. 

The video walks you through a basic setup of Cisco ASA AnyConnect client VPN that will serve as a foundation configuration of our subsequent labs. This includes supporting configuration such as routing, NAT, address pool, and default group-policy. We will have a working VPN setup that matches the traditional IPSec remote user VPN at the end of this lab.

The video walks you through a basic setup of Cisco ASA AnyConnect client VPN that will serve as a foundation configuration of our subsequent labs. This includes supporting configuration such as routing, NAT, address pool, and default group-policy. We will have a working VPN setup that matches the traditional IPSec remote user VPN at the end of this lab.

The video looks into some of the security features that can be implemented as part of Cisco ASA SSL clientless VPN. These features include Web ACL, Smart-Tunnel List, Portal Access Rule, URL bar removal, and homepage URL. 

The video looks into some of the security features that can be implemented as part of Cisco ASA SSL clientless VPN. These features include Web ACL, Smart-Tunnel List, Portal Access Rule, URL bar removal, and homepage URL. 

The video introduces you to an alternative method of per-application tunnelling on Cisco ASA SSL clientless VPN using Smart Tunnel. You will learn how the Smart Tunnel provides additional flexibility, enhances user experience, and resolves some of the issues found in Port-Forwarding. Smart Tunnel comes with many configurable options, some of which are included in this video.