Cisco FirePOWER ASA 5500 series Configuration Manual page 630

Configuring User Attributes
You do not need to configure WebVPN to use e-mail proxies.
The webvpn mode that you enter from global configuration mode lets you configure global settings for
Note
WebVPN. The username webvpn configuration mode described in this section, which you enter from
username mode, lets you customize a WebVPN configuration for specific users.
In username webvpn configuration mode, you can customize the following parameters, each of which is
described in the subsequent steps:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
The following example shows how to enter username webvpn configuration mode for the username
anyuser attributes:
hostname(config)# username anyuser attributes
hostname(config-username)# webvpn
hostname(config-username-webvpn)#
Configuring the WebVPN Functions to Enable
To configure the WebVPN functions file access and file browsing, HTTP Proxy, MAPI Proxy, and URL
entry over WebVPN for this user, enter the functions command in username webvpn configuration
mode. To remove a configured function, enter the no form of this command. These functions are disabled
by default.
To remove all configured functions, including a null value created by issuing the functions none
command, enter the no form of this command without arguments. The no option allows inheritance of a
value from another group policy. To prevent inheriting function values, enter the functions none
command.
hostname(config-username-webvpn)# functions {auto-download | citrix | file-access |
file-browsing | file-entry | filter | http-proxy | mapi | none | port-forward | url-entry}
hostname(config-username-webvpn)# no functions [auto-download | citrix | file-access |
file-browsing | file-entry | filter | http-proxy | mapi | none | port-forward | url-entry]
Table 30-7
Cisco Security Appliance Command Line Configuration Guide
30-76
functions
customizations
deny message
html-content-filter
homepage
filter
url-list
port-forward
port-forward-name
sso server (single-signon server)
auto-signon
SSL VPN Client (SVC)
keep-alive ignore
HTTP compression
describes the meaning of the keywords used in this command.
Chapter 30 Configuring Tunnel Groups, Group Policies, and Users
OL-10088-01