sslvpn

The video takes you through some miscellaneous features on Cisco AnyConnect Secure Mobility. We will look through the Client Profile editor, specifically Preference Part 1 and 2, enable or disable each of the features expalin the effect they have on the VPN behavior. Below are a list of features that we will explore in this video.

The video shows you how to provide network connectivity to Windows computers before user logon with Start-Before-Logon feature on Cisco AnyConnect Secure Mobility VPN. The feature provides a vehicle for the computer to contact Active Directory servers, for example, to authenticate the first-time login user without local account cache or to perform login script execution. Here we will use login script with drive mapping as part of our demonstration.

The video shows you how to utilize the endpoint posture information gathered during a host scan to enforce access to Cisco ASA AnyConnect VPN through Dynamic Access Policy (DAP). We will perform various checks on the status of client Antivirus software and firewall combining with the pre-login policy results from the previous lab and alter VPN access accordingly. You will learn the effect that DAP has on both AnyConnect client and clientless VPN.

The video shows you how to utilize the endpoint posture information gathered during a host scan to enforce access to Cisco ASA AnyConnect VPN through Dynamic Access Policy (DAP). We will perform various checks on the status of client Antivirus software and firewall combining with the pre-login policy results from the previous lab and alter VPN access accordingly. You will learn the effect that DAP has on both AnyConnect client and clientless VPN.

The video takes you through the Cisco ASA AnyConnect VPN abilities to gather VPN client information using Hostscan and basic Endpoint Assessment features. We will be deploying a Hostscan agent as part of an AnyConnect Posture module, and creating a pre-login policy from device registry and OS checks to categorize the endpoint and allow or deny VPN access accordingly. The video finishes with enabling Host Scan extension as a preparation to the next lab video.

The video takes you through the Cisco ASA AnyConnect VPN abilities to gather VPN client information using Hostscan and basic Endpoint Assessment features. We will be deploying a Hostscan agent as part of an AnyConnect Posture module, and creating a pre-login policy from device registry and OS checks to categorize the endpoint and allow or deny VPN access accordingly. The video finishes with enabling Host Scan extension as a preparation to the next lab video.

The video demonstrates different ways that you can leverage client-based certificate authentication with Cisco ASA AnyConnect VPN. Some of things that we will be configuring includes certificate attribute mapping to tunnel-group, authorization against Cisco ISE, dual-factor authentication with certificate and AD credential, and finally, secondary authentication. These are inherent features to the AnyConnect VPN. Additional certificate features related to AnyConnect Secure Mobility will be explored in the future videos.

The video demonstrates different ways that you can leverage client-based certificate authentication with Cisco ASA AnyConnect VPN. Some of things that we will be configuring includes certificate attribute mapping to tunnel-group, authorization against Cisco ISE, dual-factor authentication with certificate and AD credential, and finally, secondary authentication. These are inherent features to the AnyConnect VPN. Additional certificate features related to AnyConnect Secure Mobility will be explored in the future videos.

The video shows you an ability to integrate Cisco ASA with LDAP server (here we use Active Directory) and perform user attribute to RADIUS attribute mapping for Cisco AnyConnect VPN configuration. We will step through the entire process of assigning VPN parameters to an AD user, identifying the corresponding LDAP attributes, and map them to desired RADUS attributes. This is another alternative to those that do not own a RADIUS server.