Cisco PIX 500 Series Configuration Manual page 782

Configuring Browser Access to Client-Server Plug-ins
Create a temporary directory named "plugins" on a local TFTP or FTP server (for example, with the
•
hostname "local_tftp_server"), and download the plug-ins from the Cisco web site to the "plugins"
directory.
To provide clientless SSL VPN browser access to a plug-in redistributed by Cisco, install the plug-in
onto the flash device of the security appliance by entering the following command in privileged EXEC
mode.
import webvpn plug-in protocol protocol URL
protocol is one of the following values:
rdp to provide plug-in access to Remote Desktop Protocol services. Then specify the path to the
•
rdp-plugin.jar file in the URL field.
ssh,telnet to provide plug-in access to both Secure Shell and Telnet services. Then specify the path
•
to the ssh-plugin.jar file in the URL field.
Caution Do not enter this command once for SSH and once for Telnet. When typing the ssh,telnet string, do not
insert a space. Use the revert webvpn plug-in protocol command to remove any import webvpn
plug-in protocol commands that deviate from these requirements.
vnc to provide plug-in access to Virtual Network Computing services. Then specify the path to the
•
vnc-plugin.jar file in the URL field.
URL is the remote path to the source of the plug-in. Enter the host name or address of the TFTP or FTP
server and the path to the plug-in.
The following example command adds clientless SSL VPN support for RDP:
hostname# import webvpn plug-in protocol rdp
tftp://local_tftp_server/plugins/rdp-plugin.jar
Accessing
tftp://local_tftp_server/plugins/rdp-plugin.jar...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Writing file disk0:/csco_config/97/plugin/rdp...
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
329994 bytes copied in 5.350 secs (65998 bytes/sec)
The following example command adds clientless SSL VPN support for SSH and Telnet:
hostname# import webvpn plug-in protocol ssh,telnet
tftp://local_tftp_server/plugins/ssh-plugin.jar
Accessing
tftp://local_tftp_server/plugins/ssh-plugin.jar...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!
Writing file disk0:/csco_config/97/plugin/ssh...
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
238510 bytes copied in 3.650 secs (79503 bytes/sec)
The following example command adds clientless SSL VPN support for VNC:
hostname# import webvpn plug-in protocol vnc
tftp://local_tftp_server/plugins/vnc-plugin.jar
Accessing tftp://local_tftp_server/plugins/vnc-plugin.jar...!!!!!!!!!!!!!!!
Writing file disk0:/csco_config/97/plugin/vnc...
!!!!!!!!!!!!!!!
58147 bytes copied in 2.40 secs (29073 bytes/sec)
Cisco Security Appliance Command Line Configuration Guide
37-26
Chapter 37 Configuring Clientless SSL VPN
OL-12172-03