Cisco PIX 500 Series Configuration Manual page 828

Clientless SSL VPN End User Setup
Table 37-10 Remote System Configuration and End User Requirements for Clientless SSL VPN (continued)
Task
Using Application
Access
Cisco Security Appliance Command Line Configuration Guide
37-72
Remote System or End User Requirements
On Macintosh OS X, only the Safari browser supports this feature.
Note
Note Because this feature requires installing Sun Microsystems Java™ Runtime Environment
and configuring the local clients, and because doing so requires administrator permissions
on the local system, it is unlikely that users will be able to use applications when they
connect from public remote systems.
Users should always close the Application Access window when they finish using
Caution
applications by clicking the Close icon. Failure to quit the window properly can cause
Application Access or the applications themselves to be disabled. See
hosts File Errors When Using Application Access
Client applications installed
Cookies enabled on browser
Administrator privileges
Sun Microsystems Java Runtime
Environment (JRE) version 1.4.x and 1.5.x
installed.
Javascript must be enabled on the browser.
By default, it is enabled.
Client applications configured, if necessary.
The Microsoft Outlook client does
Note
not require this configuration step.
All non-Windows client applications require
configuration.
To see if configuration is necessary for a
Windows application, check the value of the
Remote Server.
If the Remote Server contains the server
•
hostname, you do not need to configure
the client application.
If the Remote Server field contains an IP
•
address, you must configure the client
application.
Clicking a URL (such as one in an -e-mail message) in an application running over a
Note
clientless SSL VPN session does not open the site over that session. To open a site over
the session, paste the URL into the Enter Clientless SSL VPN (URL) Address field.
Chapter 37 Configuring Clientless SSL VPN
Specifications or Use Suggestions
for details.
—
—
User must have administrator access on the PC if
you use DNS names to specify servers because
modifying the hosts file requires it.
If JRE is not installed, a pop-up window displays,
directing users to a site where it is available.
On rare occasions, the port forwarding applet fails
with JAVA exception errors. If this happens, do
the following:
Clear the browser cache and close the browser.
1.
2. Verify that no JAVA icons are in the computer
task bar. Close all instances of JAVA.
3. Establish a clientless SSL VPN session and
launch the port forwarding JAVA applet.
To configure the client application, use the server's
locally mapped IP address and port number. To
find this information:
Start a clientless SSL VPN session and click
1.
the Application Access link on the Home
page. The Application Access window
appears.
In the Name column, find the name of the
2.
server you want to use, then identify its
corresponding client IP address and port
number (in the Local column).
Use this IP address and port number to
3.
configure the client application. Configuration
steps vary for each client application.
Recovering from
OL-12172-03