Cisco FirePOWER ASA 5500 series Configuration Manual page 24

Contents
Configuring WebVPN
37
C H A P T E R
Cisco Security Appliance Command Line Configuration Guide
xxiv
Configuring an ACL
36-4
Defining a Tunnel Group
36-5
Creating a Crypto Map and Applying It To an Interface
Applying Crypto Maps to Interfaces
37-1
Getting Started with WebVPN
Observing WebVPN Security Precautions
Understanding Features Not Supported for WebVPN
Using SSL to Access the Central Site
Using HTTPS for WebVPN Sessions
Configuring WebVPN and ASDM on the Same Interface
Setting WebVPN HTTP/HTTPS Proxy
Configuring SSL/TLS Encryption Protocols
Authenticating with Digital Certificates
Enabling Cookies on Browsers for WebVPN
Managing Passwords
Using Single Sign-on with WebVPN
Configuring SSO with HTTP Basic or NTLM Authentication
Configuring SSO Authentication Using SiteMinder
Configuring SSO with the HTTP Form Protocol
Authenticating with Digital Certificates
Creating and Applying WebVPN Policies
Creating Port Forwarding, URL, and Access Lists in Global Configuration Mode
Assigning Lists to Group Policies and Users in Group-Policy or User Mode
Enabling Features for Group Policies and Users
Assigning Users to Group Policies
Using the Security Appliance Authentication Server
Using a RADIUS Server
Configuring WebVPN Tunnel Group Attributes
Configuring WebVPN Group Policy and User Attributes
Configuring Application Access
Downloading the Port-Forwarding Applet Automatically
Closing Application Access to Prevent hosts File Errors
Recovering from hosts File Errors When Using Application Access
Understanding the hosts File
Stopping Application Access Improperly
Reconfiguring a hosts File
Configuring File Access
37-21
36-7
37-1
37-2
37-3
37-3
37-4
37-4
37-4
37-5
37-5
37-5
37-14
37-14
37-15
37-15
37-15
37-16
37-17
37-18
37-19
37-19
36-6
37-2
37-3
37-6
37-7
37-9
37-15
37-15
37-16
37-17
37-17
37-18
37-15
OL-10088-01