Cisco ASA AnyConnect VPN

In this introductionary lecture you will learn about the differences between the old IPSec vpn client and AnyConnect, and why we should use the latter.

I explain how the lab environment for this course is designed.

AnyConnect-files are mandatory when setting up AnyConnect. Here you will learn which files to download and how to find them.

There are 2 ways to manage the Cisco ASA firewall: cli and ASDM. You need to understand the relation between them, which you will after this lecture.

AnyConnect uses ssl certificates and in this lecture you will understand how they are configured.

You will learn how to upload the files to the firewall.

AnyConnect requires licenses. Still we can do some things with the default licenses. I explain how and why.

Step one in setting up anyconnect is to activate the uploaded files.

The critical moment has come, time to enable Anyconnect connections globally in the firewall!

When everything doesnt work as expected there are a lot of tools available, such as logging and debugging. 

The very first connection attempt. We verify that everything works as expected. 

In the last lecture we could connect but not communicate. We fix the Network Address Translation in this lecture and everything starts to work.

We have communication with the internal resources, but how do we turn the traffic to get internet access? We solve this in this lecture.

Sometimes we do not want to tunnel everything. This is called split tunneling and I explain here and show how to set it up.

We can make the user select between different connections profiles manually.

With vpn-filter we can granuarily filter traffic between the client and the internal resources. 

The client profile editor is used to send configuration settings to the client. In this lecture You will learn how to edit the configuration files.

External authentication of users is mandatory in almost all implementation. I show and explain here how to connect the firewall to Active Directory over LDAP.

The real power of AnyConnect is DAP. In these lectures I show how we can configure access to resources based on AD group memberships.

The real power of AnyConnect is DAP. In these lectures I show how we can configure access to resources based on AD group memberships.

What is missing? What should be added, modified or deleted? Please let me know!

This bonus lecture contains information about me and my other courses.