Configuring Webvpn Tunnel Group Attributes - Cisco FirePOWER ASA 5500 series Configuration Manual

Configuring WebVPN Tunnel Group Attributes

For example, to set a WebVPN user to the SSL_VPN group, set the RADIUS Class Attribute to a value
of OU=SSL_VPN; (Do not omit the semicolon.)
Configuring WebVPN Tunnel Group Attributes
Table 37-1
attributes, you configure general tunnel group attributes common to all VPN connections. For
step-by-step information on configuring tunnel groups, see
Chapter 30, "Configuring Tunnel Groups, Group Policies, and Users."
Table 37-1
Command
authentication
customization
nbns-server
group-alias
group-url
dns-group
hic-fail-group-policy Specifies a VPN feature policy if you use the Cisco Secure Desktop Manager
Configuring WebVPN Group Policy and User Attributes
Table 37-2
configuring group policy and user attributes, see
Attributes for Specific
.
Table 37-2
Command
auto-signon
customization
deny-message
filter
Cisco Security Appliance Command Line Configuration Guide
37-16
provides a list of tunnel group attributes that are specific to WebVPN. In addition to these
WebVPN Tunnel Group Attributes
Function
Sets the authentication method.
Identifies the name of a previously defined customization to apply.
Identifies the name of the NetBIOS Name Service server (nbns-server) to use
for CIFS name resolution.
Specifies the alternate names by which the server can refer to a tunnel group
Identifies one or more group URLs. If you configure this attribute, users
coming in on a specified URL need not select a group at login
Identifies the DNS server group that specifies the DNS server name, domain
name, name server, number of retries, and timeout values
to set the Group-Based Policy attribute to "Use Failure Group-Policy" or "Use
Success Group-Policy, if criteria match."
provides a list of WebVPN group policy and user attributes. For step-by-step instructions on
Users"in Chapter 30, "Configuring Tunnel Groups, Group Policies, and Users."
WebVPN Group Policy and User Attributes
Function
Sets values for auto signon, which requires only that s user enter username and
password credentials only once for a WebVPN connection.
Assigns a customization object to a group-policy or user.
Specifies the message delivered to a remote user who logs into WebVPN
successfully, but has no VPN privileges.
Sets the name of the webtype access list.
Chapter 37
"Configuring WebVPN Tunnel Groups"
"Configuring Group Policies"
Configuring WebVPN
in
and "Configuring
OL-10088-01